Step 02 / Explore the pack

See every service mapped and every breach tracked.

A visual view of the Solvency II insurers edition before you open Excel. This pack is for firms in scope of SYSC 15A only. Choose a tab to explore the illustrative worked example.

Choose sector
Preview
Download

Solvency II insurers

Operational resilience pack · illustrative example firm: Kestrel Mutual Assurance Ltd

Change edition

For firms in scope of SYSC 15A only. A firm that is not in the list in SYSC 15A.1.1R is outside the rules.

04
Important business services: 06
Scenario tests: 01
Tolerance breaches: 01
Vulnerabilities

operational-resilience-pack-insurance-workbook-worked-example.xlsxIllustrative example

Every scenario test, with the disruption time found against the tolerance, and the vulnerabilities that remediate the breaches.

T-01 · Paying claims22 Jul 2026 · Loss or reduced provision of technology · 4 days against a tolerance of 3 daysBreach, remediating
T-02 · Taking out and renewing policies30 Jun 2026 · Unavailability of a third-party service · 8 hours against a tolerance of 12 hoursWithin tolerance
T-03 · Emergency claims line16 Sep 2026 · Loss or reduced provision of technology · 3 hours against a tolerance of 4 hoursWithin tolerance
T-04 · Collecting premiums5 Aug 2026 · Disruption to other market participants · 24 hours against a tolerance of 2 daysWithin tolerance
T-05 · Paying claims2 Sep 2026 · Unavailability of facilities or key people · 2 days against a tolerance of 3 daysWithin tolerance
T-06 · Emergency claims line14 Oct 2026 · Unavailability of a third-party service · 2 hours against a tolerance of 4 hoursWithin tolerance

Vulnerabilities

V-01 · IBS-01Target 4 Dec 2026 · No fallback payment route if the claims platform is down for more than three daysOpen

See the actual workbook · real Excel sheets, rendered from the example file

Solvency II insurers: One-page board summary of operational resilience (illustrative example)

Board summary · opens full size

Solvency II insurers: Important business services with tolerance, mapping, tests and status (illustrative example)

Important business services · opens full size

Solvency II insurers: Scenario tests with disruption time against impact tolerance (illustrative example)

Scenario tests · opens full size

Solvency II insurers: Vulnerabilities and remediation tracker (illustrative example)

Vulnerabilities · opens full size

Built from the same data and formulas as the worked-example workbook, for an invented firm. Every name and figure is invented.

About the Solvency II insurers edition

Solvency II firms in scope of the FCA's operational resilience rules. SYSC 15A.1.1R lists a Solvency II firm. An insurer authorised by the PRA is also subject to the PRA's own operational resilience rules, which this pack does not cover and which we have not verified. From 18 March 2027 a Solvency II firm is an enhanced reporting firm for incidents and must notify material third-party arrangements.

This pack covers the FCA's rules only. If your firm is dual-regulated, check the PRA's rules and supervisory statements separately.

It is not for a firm that is not in the list in SYSC 15A.1.1R, such as a core or limited scope SM&CR firm that is not otherwise listed, a temporary-permission or temporary-authorisation firm, or a firm with its head office outside the United Kingdom. Check your own position.

The FCA does not set a template for an operational resilience self-assessment. This pack is a practical structure built on SYSC 15A and the FCA's incident and third-party reporting rules that start on 18 March 2027. See our payment services guidance, outsourcing due diligence and resource library.