Step 02 / Explore the pack

See every service mapped and every breach tracked.

A visual view of the Solvency II insurers edition before you open Excel. This pack is for firms in scope of SYSC 15A only. Choose a tab to explore the illustrative worked example.

  1. Choose sector
  2. Preview
  3. Download

Solvency II insurers

Operational resilience pack · illustrative example firm: Kestrel Mutual Assurance Ltd

Change edition

For firms in scope of SYSC 15A only. A firm that is not in the list in SYSC 15A.1.1R is outside the rules.

04
Important business services

Each with a tolerance

06
Scenario tests

Severe but plausible

01
Tolerance breaches

Each with remediation

01
Vulnerabilities

Tracked to closure

operational-resilience-pack-insurance-workbook-worked-example.xlsxIllustrative example

Status as at 30 Oct 2026

Tolerance breaches under remediation: 1

  • Important business services

    4

  • Tolerance breaches found

    1

  • Breaches under remediation

    1

  • Breaches awaiting a retest

    0

  • Vulnerabilities overdue

    0

  • Services with no test

    0

  • Services not fully mapped

    0

  • Records needing attention

    0

Self-assessment approval: Approved. Claims payment relies on one platform; the fallback route is due by 4 December 2026.

The board summary never says the firm is compliant or operationally resilient. It names what is missing, late or unfinished.

See the actual workbook · real Excel sheets, rendered from the example file
Solvency II insurers: One-page board summary of operational resilience (illustrative example)Board summary · opens full sizeSolvency II insurers: Important business services with tolerance, mapping, tests and status (illustrative example)Important business services · opens full sizeSolvency II insurers: Scenario tests with disruption time against impact tolerance (illustrative example)Scenario tests · opens full sizeSolvency II insurers: Vulnerabilities and remediation tracker (illustrative example)Vulnerabilities · opens full size

Built from the same data and formulas as the worked-example workbook, for an invented firm. Every name and figure is invented.

About the Solvency II insurers edition

Solvency II firms in scope of the FCA's operational resilience rules. SYSC 15A.1.1R lists a Solvency II firm. An insurer authorised by the PRA is also subject to the PRA's own operational resilience rules, which this pack does not cover and which we have not verified. From 18 March 2027 a Solvency II firm is an enhanced reporting firm for incidents and must notify material third-party arrangements.

This pack covers the FCA's rules only. If your firm is dual-regulated, check the PRA's rules and supervisory statements separately.

It is not for a firm that is not in the list in SYSC 15A.1.1R, such as a core or limited scope SM&CR firm that is not otherwise listed, a temporary-permission or temporary-authorisation firm, or a firm with its head office outside the United Kingdom. Check your own position.

The FCA does not set a template for an operational resilience self-assessment. This pack is a practical structure built on SYSC 15A and the FCA's incident and third-party reporting rules that start on 18 March 2027. See our payment services guidance, outsourcing due diligence and resource library.