PRA’s Business Plan 2026/27 sets out a risk-based agenda to strengthen resilience, enhance oversight of emerging risks, and reinforce data-driven supervision and FC controls while supporting growth

It also strengthens expectations around operational resilience, including enhanced reporting of incidents and third-party dependencies, while advancing work on AI, cryptoassets, and data-driven supervision through streamlined reporting and improved analytics, alongside reforms to accountability frameworks such as the Senior Managers & Certification Regime, ultimately reinforcing the need for firms to maintain strong financial crime controls, high-quality data, and proportionate risk management as regulation evolves to support growth and innovation…