Step 02 / Explore the pack
See every service mapped and every breach tracked.
A visual view of the Solvency II insurers edition before you open Excel. This pack is for firms in scope of SYSC 15A only. Choose a tab to explore the illustrative worked example.
- Choose sector
- Preview
- Download
Solvency II insurers
Operational resilience pack · illustrative example firm: Kestrel Mutual Assurance Ltd
For firms in scope of SYSC 15A only. A firm that is not in the list in SYSC 15A.1.1R is outside the rules.
- 04
- Important business services
- 06
- Scenario tests
- 01
- Tolerance breaches
- 01
- Vulnerabilities
Each with a tolerance
Severe but plausible
Each with remediation
Tracked to closure
The services the invented firm considered, with the impact tolerance, mapping and status the workbook works out.
| Service | Tolerance | Tests | Status |
|---|---|---|---|
| IBS-01 · Paying claims | 3 days | 2 | Breach unresolved |
| IBS-02 · Taking out and renewing policies | 12 | 1 | Complete |
| IBS-03 · Emergency claims line | 4 | 2 | Complete |
| IBS-04 · Collecting premiums | 2 days | 1 | Complete |
| IBS-05 · Customer newsletter | n/a | n/a | Not an important service |
Tolerance in hours unless a number of days is shown.
See the actual workbook · real Excel sheets, rendered from the example file
Built from the same data and formulas as the worked-example workbook, for an invented firm. Every name and figure is invented.
About the Solvency II insurers edition
Solvency II firms in scope of the FCA's operational resilience rules. SYSC 15A.1.1R lists a Solvency II firm. An insurer authorised by the PRA is also subject to the PRA's own operational resilience rules, which this pack does not cover and which we have not verified. From 18 March 2027 a Solvency II firm is an enhanced reporting firm for incidents and must notify material third-party arrangements.
This pack covers the FCA's rules only. If your firm is dual-regulated, check the PRA's rules and supervisory statements separately.
It is not for a firm that is not in the list in SYSC 15A.1.1R, such as a core or limited scope SM&CR firm that is not otherwise listed, a temporary-permission or temporary-authorisation firm, or a firm with its head office outside the United Kingdom. Check your own position.
The FCA does not set a template for an operational resilience self-assessment. This pack is a practical structure built on SYSC 15A and the FCA's incident and third-party reporting rules that start on 18 March 2027. See our payment services guidance, outsourcing due diligence and resource library.