Skip to content

FCA compliance e-learning courses for regulated firms - CISI CPD certified

Tap into over 70 e-learning modules with our FCA compliance course library. Equip your team with the necessary tools to navigate every aspect of FCA regulations, from high-level and conduct of business standards to thematic topics such as Consumer Duty, vulnerable customers, and operational resilience.

Our CPD-accredited modules include sector-specific learning for banking, investments, and mortgages, alongside a full set of FCA SMCR training courses.

Ensure your company’s FCA compliance

Best for…

Companies looking for an engaging, all-encompassing FCA course library.

Hosted on…

The Skillcast Learning Management System or your existing platform.

Learn with…

Over 70 training modules, with sector-specific versions for banking, investments, and mortgages.

fca_compliance_1

Stay on the right side of FCA regulations

Our FCA Compliance course library is ideal for those looking to simplify the complexities of FCA regulations. Financial services firms face a particularly complex regime when it comes to compliance, and breaches can result in unwanted penalties or sanctions. Education is vital in ensuring your employees understand their roles and adhere to regulations set by the FCA. You can host our FCA course library on our fully managed LMS portal or use your own. Plus, you can customise this library by exploring our bespoke training plans.

About our learning styles

In-depth

These are our more detailed e-learning courses that include practice scenarios and typically last between 25 and 45 minutes.

Refresher

These targeted courses help reinforce your employees' knowledge and notify them of any updates they might not be aware of. These typically last between 15 and 20 minutes.

Express

Our focused training courses deliver employee learning in smaller chunks, typically lasting between 10 and 15 minutes.

Microlearning

These bite-sized animated training videos can be delivered as: standalone, embedded in detailed e-learning courses, or compiled into a learning path.

Dive deeper into our FCA courses

See what’s included in our FCA course library below. Looking for something specific? Use the search bar to find what you need. If you have any questions, reach out and tell us more about your requirements — we’re happy to help.

Good Outcomes for Vulnerable Customers

Companies have a legal obligation to identify the signs of vulnerability and ensure that vulnerable individuals are treated fairly.

Overview of the Consumer Duty

The FCA's Consumer Duty is a new standard which addresses the conduct of firms.

Meeting the Conduct Rules in FCA Solo Regulated Firms

The Conduct Rules are a fundamental aspect of the SMCR.

Whistleblowing in Financial Services

Our Whistleblowing training course educates employees on reporting misconduct safely and ensures protection.

Meeting the Conduct Rules in Dual Regulated Firms

The Conduct Rules are a fundamental aspect of the SMCR.

Complaints Handling

The FCA has identified that the number of complaints submitted in the financial services sector has increased year on year in recent times in the UK.

Introduction to the Consumer Duty

The FCA's Consumer Duty is a new standard which addresses the conduct of firms.

Treating Customers Fairly

Treating Customers Fairly (TCF) applies to firms in the financial services industry.

Personal Conflicts of Interest

The FCA states that a firm must manage conflicts of interest between itself and its customers or other clients.

Introduction to UK Financial Regulation

NEDs are an important part of a firm's governance and provide independence and oversight.

Operational Resilience

The FCA has made operational resilience a requirement for banks, building societies, PRA-designated investment firms, enhanced scope firms and other financial institutions.

CASS Overview

The FCA's Client Assets Sourcebook (CASS) supports Principle 10 of the FCA's Principles for Businesses.

Conflicts of Interest in Asset Management

The FCA outlines its expectations that asset management firms establish and maintain an effective framework to identify, control and review conflicts of interest.

MCOB - General Standards

The Mortgage Conduct of Business (MCOB) for General Standards applies to all firms that deal with home finance.

Principles for Businesses

The FCA's Principles for Businesses apply to all financial services firms in the UK regulatory system.

Ethical Standards in Finance and Investment

The FCA's ethical standards apply to individuals in finance and investment.

BCOBS - General Standards

The FCA Banking Conduct of Business Sourcebook (BCOBS) applies to all firms that accept deposits from banking customers in the UK.

Training and Competence

Training and Competence (T&C) forms an important part of UK regulations under the FCA.

Overview of SM&CR for FCA Solo Firms

Our SMCR Overview training course will help your employees understand the key steps needed to comply with the regime.

COBS - Client Communications and Financial Promotions

The Conduct of Business Sourcebook (COBS) applies to financial firms in the UK that deal with client investments.

CONC - Consumer Credit Regulations

The FCA's Consumer Credit sourcebook (CONC) applies to all firms engaged in credit-related regulatory activities in the UK.

Introduction to the Senior Managers and Certification Regime (SM&CR)

The UK's financial services sector has been rocked over the past decade by scandals ranging from misselling to market manipulation.

COBS - Client Categorisation

The Conduct of Business Sourcebook (COBS) applies to financial firms in the UK that deal with client investments.

Payment Services Regulations

The Payment Services Regulations (PSRs) 2017 was introduced in 2018 and set the Payment Services Directive 2 (PSD2) in motion.

Whistleblowing for Managers

Whistleblowing refers to disclosing corrupt, illegal or fraudulent activities committed by organisations.

Appropriate Use of Communication Channels

Not all communication channels are appropriate for business purposes.

Markets in Financial Instruments Directive II (MiFID II)

The Markets in Financial Instruments Directive (MiFID) originally aimed to increase competition and integration in markets for financial instruments.

COBS - Dealing and Managing

The FCA Conduct of Business Sourcebook (COBS) applies to financial firms in the UK.

Information Barriers

The flow of information in financial firms needs monitoring between businesses involved with private and public side activities.

Senior Management Arrangements Systems and Controls

The Senior Management Arrangements Systems and Controls (SYSC) Sourcebook apply to authorised financial services firms.

Conduct Rules for Senior Managers at Dual Regulated Firms

Under the Senior Managers Regime, all senior managers must comply with the FCA's six Individual Conduct Rules (ICRs) and four Senior Managers Rules (SMRs).

MCOB - APRC, Shortfalls and Charges

The Mortgage Conduct of Business (MCOB) for the Annual Percentage Rate of Charge (APRC), shortfalls, and charges apply to home finance businesses.

FSCS Deposit Protection

The Financial Services Compensation Scheme (FSCS) safeguards customers' finances.

Complaints Handling for Managers

One of the three operational objections of the FCA is to protect consumers.

Overview of SM&CR for Dual Regulated Firms

Our SMCR Overview training course will help your employees understand the key steps needed to comply with the regime.

Fit and Proper Assessments

In order to perform a Senior Management Function (SMF), Senior Managers need to be approved by the FCA and, for dual regulated firms, the PRA.

Conduct Rules for Non-Executive Directors (NEDs)

NEDs are an important part of a firm's governance and provide independence and oversight.

Non-Financial Misconduct

Non-financial misconduct is behaviour that is unrelated to regulated activities, including serious offences such as harassment, bullying, sexual discrimination and sexual misconduct The FCA has indicated it is prepared to consider non-financial misconduct when assessing fitness and propriety.

Conduct Rules for Senior Managers at FCA Solo Firms

Under the Senior Managers Regime, all senior managers must comply with the FCA's six Individual Conduct Rules (ICRs) and four Senior Managers Rules (SMRs).

AIFM Regulations

The Alternative Investment Fund Managers Directive (AIFMD) was developed by the EU in order to create a harmonised framework of rules for regulating AIFMs.

Appointed Representatives Regulatory Responsibilities

The FCA expects companies to ensure all their appointed representatives know the provisions within the FCA handbook.

BCOBS - Distance Communications

The Banking Conduct of Business Sourcebook (BCOBS) applies to all firms accepting deposits from banking customers in the UK.

Benchmarks Regulation

The FCA defines a Benchmark as an index used to determine the value of or the amount payable under a financial instrument (or contract).

Breathing Space Regulations

Breathing Space Regulations apply to creditors whose debtors are eligible for additional time to repay their debt.

CASS 10 - CASS Resolution Pack

A CASS Resolution Pack (RP) contains a specific set of documents that helps speed up client money and assets return if a firm fails.

CASS 6 - Custody Rules

The rules and guidance in CASS 6 apply to a firm when it is safeguarding and administering custody assets.

CASS 7 and 7A - Client Money Rules and Client Money Distribution and Transfer

The rules and guidance in CASS aim to achieve the FCA's objective of ensuring that consumers are adequately protected.

CASS 8 - Mandates

Under the requirements of CASS 8, you must understand what a mandate is and how to deal with them.

CASS 9 - Information to Clients

Under the requirements of CASS 9, you are required to pass on certain information to clients, particularly where prime brokers, custody assets and client money are concerned.

CeMAP Competency Refresher

The Certificate in Mortgage Advice & Practice (CeMAP) is a UK specific qualification issued by the London Institute of Banking & Finance (LIBF).

COBS - Appropriateness

The FCA's Conduct of Business Sourcebook (COBS) applies to financial firms that deal with customer investments on an execution-only basis.

COBS - Client Communications High Risk Investments

The Conduct of Business Sourcebook (COBS) rules that relate to client communication apply to all promotional communications that investment firms have with their clients and prospects.

COBS - Suitability

The FCA Conduct of Business Sourcebook (COBS) applies to finance and investment firms in the UK.

Complaints Handling for the Mortgage Market

The FCA outlines complaints handling rules in the Dispute Resolution Sourcebook (DISP).

FX Global Code

The FX Global Code is a set of global principles of good practice in the foreign exchange market.

ICOBS - Cancellation and Claims in Finance

The Insurance Conduct of Business Sourcebook (ICOBS) applies to all non-investment insurance businesses.

ICOBS - Distance Communications

The Insurance Conduct of Business Sourcebook (ICOBS) for distance communications applies to all insurance firms that engage in distance marketing activity in the UK.

Introduction to the Perimeter Guidance Manual

PERG helps clarify when financial activities need FCA authorisation, as outlined by the Financial Services and Markets Act 2000 (FSMA).

MCOB - Advising and Selling

The Mortgage Conduct of Business (MCOB) Advising and Selling standards apply to businesses that advise on or arrange mortgage contracts, equity release transactions, home purchase plans or sale and rent back agreements.

MCOB - Disclosures

The Mortgage Conduct of Business (MCOB) for Disclosures applies to businesses involved in home finance transactions.

MCOB - Equity Release

The Mortgage Conduct of Business (MCOB) for Equity Release applies to businesses that make recommendations or provide personalised information to customers on equity release products.

MCOB - Financial Promotions

The Mortgage Conduct of Business (MCOB) for Financial Promotions applies to financial promotions in the home finance business.

Mortgage Credit Directive

The EU Mortgage Credit Directive (MCD) applies to all businesses dealing with first-charge, second-charge, and buy-to-let mortgages.

Outsourcing and Third Party Risk Management

As the risk inherent to business relationships grow, regulators have been drafting and implementing outsourcing and third-party risk management rules and guidance.

Packaged Retail and Insurance-based Investment Products (PRIIPs) Regulation in Finance

The Packaged Retail and Insurance-based Investment Product (PRIIP) Regulation affects retail investors who need to understand the complexities of these products.

Pensions Ombudsman Complaints Handling

In the UK, the Pensions Ombudsman handles pension complaints and disputes at no cost to members of occupational and personal pension schemes.

Prudential Regulation

Prudential Regulation applies to firms in financial services.

Responsible Lending and Affordability

Responsible Lending and Affordability are non-negotiable principles that underpin the UK's mortgage market reform.

SEC Rule 15a-6

To engage in securities transactions with United States (US) clients, non-US firms must comply with Rule 15a-6 requirements.

Sustainability Disclosure Requirements (SDR) and Investment Labels

The introduction of sustainability rules aims to enhance the transparency and credibility of financial products with sustainability objectives.

Swap Execution Facilities (SEFs) and Designated Contract Markets (DCMs)

Swap Execution Facilities (SEFs) and Designated Contract Markets (DCMs) exist as part of the US response to the financial crisis.

UCITS

Undertakings for the Collective Investment in Transferable Securities (UCITS) Directive aims to offer asset managers and investors greater business opportunities.

UK Money Markets Code

The UK Money Markets Code provides a set of principles to promote the integrity and effective functioning of the UK money markets.

Understanding Failure to Prevent Fraud (FTPF) in Financial Services

Failure to Prevent Fraud (FTPF) is a corporate offence that holds organisations criminally liable if they do not have reasonable measures in place to stop fraud committed by someone acting on their behalf.

Understanding Failure to Prevent Fraud (FTPF) in Financial Services for Managers

Failure to Prevent Fraud (FTPF) is a corporate offence that holds organisations criminally liable if they do not have reasonable measures in place to stop fraud committed by someone acting on their behalf.

SDR and Investment Labels

Sustainability-related claims in financial products must be clear, transparent and backed by evidence.

ICOBS - General Matters

The Insurance Conduct of Business Sourcebook (ICOBS) for general matters applies to all firms engaged in the insurance business.

ICOBS - Providing Information and Advising

The Insurance Conduct of Business Sourcebook (ICOBS) for Providing Information and Advising applies to insurance intermediaries.

Car Finance Mis-selling

The Financial Conduct Authority banned discretionary commission arrangements in car finance due to concerns about unfair interest rates.

Developing Secure Applications

The way companies build software and technology systems is evolving very rapidly.

Conduct Rule 1: Act with Integrity

Integrity is a fundamental principle in financial services, ensuring ethical conduct and maintaining customer trust.

Conduct Rule 2: Act with due skill, care and diligence

People working in financial services must act with due skill, care and diligence, ensuring their actions do not harm customers or the financial system.

Conduct Rule 3: Be open and cooperative with the FCA, the PRA and other regulators

Financial services firms and employees must be open and cooperative with regulators, including the Financial Conduct Authority and the Prudential Regulation Authority.

Conduct Rule 4: Pay due regard to the interests of customers and treat them fairly

Financial services professionals must always act in the best interests of customers and ensure they are treated fairly.

Conduct Rule 5: Observe proper standards of market conduct

Financial markets rely on trust, integrity and adherence to established rules and ethical behaviour.

Conduct Rule 6: Act to deliver good outcomes for retail customers

Financial services professionals must act in good faith, prevent foreseeable harm and support customers in achieving their financial objectives.

BCOBS - Distance Communications [Mutual]

The Banking Conduct of Business Sourcebook (BCOBS) applies to all firms accepting deposits from banking customers in the UK.

BCOBS - General Standards [Mutual]

The FCA Banking Conduct of Business Sourcebook (BCOBS) applies to all firms that accept deposits from banking customers in the UK.

ICOBS - Cancellation and Claims [Mutual]

The Insurance Conduct of Business Sourcebook (ICOBS) applies to all non-investment insurance businesses.

ICOBS - Distance Communications [Mutual]

The Insurance Conduct of Business Sourcebook (ICOBS) for distance communications applies to all insurance firms that engage in distance marketing activity in the UK.

ICOBS - General Matters [Mutual]

The Insurance Conduct of Business Sourcebook (ICOBS) for general matters applies to all firms engaged in the insurance business.

Payment Services Regulations [Mutual]

The Payment Services Regulations (PSRs) 2017 was introduced in 2018 and set the Payment Services Directive 2 (PSD2) in motion.

Principles for Businesses [Mutual]

The FCA's Principles for Businesses apply to all financial services firms in the UK regulatory system.

Treating Customers Fairly [Mutual]

Treating Customers Fairly (TCF) applies to firms in the financial services industry.

ICOBS - Providing Information and Advising [Mutual]

The Insurance Conduct of Business Sourcebook (ICOBS) for Providing Information and Advising applies to insurance intermediaries.

Financial Crime Prevention

Financial crime ranges from fraud, tax evasion, bribery, market abuse, insider dealing, money-laundering, to terrorist financing.

Conduct Risk

The FCA focuses on good customer outcomes and how a firm achieves this through staff conduct at all levels of the business.

Senior Management Arrangements Systems and Controls [Mutual]

The Senior Management Arrangements Systems and Controls (SYSC) Sourcebook apply to authorised financial services firms.

fca_compliance_2

Boost your compliance efforts with purpose-designed software

The Skillcast Portal is your central platform for handling e-learning and policy management, staff disclosures, compliance registers, and more. Available in Standard, Enhanced, and Premium plans, the Skillcast Portal elevates how you deliver compliance training. All plans come with our five-star managed services and security as standard.

Learn how we boosted MS Amlin’s course completion rate to 100%

Your questions, answered

Which principle is most important in an insurance contract?

Utmost good faith is the most critical, requiring both parties to disclose all material facts. Without it, contracts risk being invalidated under UK insurance law.

What is proximate cause in insurance?

It is the dominant, effective cause of loss, not merely the last or nearest event. Courts use proximate cause to determine whether a peril covered by the policy actually triggered the claim.

How does the principle of indemnity work in real-life claims?

The principle of indemnity ensures you’re restored to your pre-loss financial state, not profiting from claims. For example, if your insured car repair costs £9,000, the insurer pays that amount, not the full policy limit.

What types of firms are regulated under CONC?

Under the Consumer Credit sourcebook (CONC), firms engaged in consumer credit activities, including lenders, credit brokers, debt management firms, and credit information services, are regulated by the Financial Conduct Authority (FCA). This encompasses a broad spectrum of consumer finance services, such as personal loans, hire purchase agreements, and credit broking.

How often should firms review their CONC compliance policies?

Firms are required to review their CONC compliance policies regularly to ensure they remain effective and up to date. While the FCA does not prescribe a specific review frequency, it is generally expected that firms assess their compliance arrangements periodically, taking into account changes in business operations, regulatory updates, and market conditions. 

What triggers an FCA investigation into CONC breaches?

The FCA may initiate an investigation into potential breaches of CONC if there is evidence of widespread or repeated failures that could harm consumers. Triggers include patterns of non-compliance, consumer complaints, or findings from supervisory activities that suggest systemic issues.

What kind of staff training is required to meet CONC standards?

To meet CONC standards, firms must ensure that their staff receive appropriate training and supervision. This includes providing relevant training before employees work with reduced supervision and ensuring supervisors have the necessary technical knowledge and coaching skills.

How does insider trading affect businesses and investors?

Insider trading damages market fairness, giving some investors an unfair advantage and undermining trust. For businesses, it risks reputational harm and FCA penalties, even without personal gain. Investors face distorted prices and reduced confidence, with the FCA finding signs of insider dealing in nearly a third of UK takeovers.

What tools are used to detect insider trading?

The FCA relies on surveillance systems, transaction data, and Suspicious Transaction and Order Reports (STORs). Firms must keep insider lists and use internal trade monitoring, pre-clearance systems, and staff training.

How does the FCA regulate insider trading?

The FCA regulates insider trading under the Financial Services and Markets Act 2000, the Criminal Justice Act 1993, and UK MAR, reinforced by the Financial Services Act 2021. Sanctions include unlimited fines, injunctions, public censures, and up to 10 years’ imprisonment.

What is a Recognised Investment Exchange (RIE) and how is it regulated?

A Recognised Investment Exchange (RIE) is a UK exchange authorised by the FCA to trade securities or derivatives. RIEs must maintain orderly markets, monitor for abuse, and ensure member compliance, with the FCA supervising their operations and enforcing rules as needed.

What steps can firms take to avoid FCA penalties?

Firms can mitigate the risk of FCA penalties by establishing comprehensive compliance frameworks. This includes implementing clear policies on market abuse, conducting regular staff training, maintaining accurate insider lists, and ensuring timely submission of Suspicious Transaction and Order Reports (STORs). Additionally, firms should regularly audit their surveillance systems to detect and address any potential issues promptly.

How does the FCA monitor and detect market abuse?

The FCA employs advanced surveillance tools to monitor trading activities, including the analysis of transaction reports and order books. Firms are required to submit STORs when they suspect market abuse, and issuers must maintain insider lists. The FCA also collaborates with other regulators and uses data analytics to identify and investigate potential instances of market abuse, ensuring the integrity of UK financial markets.

What does FCA COBS stand for?

FCA COBS stands for the Financial Conduct Authority’s Conduct of Business Sourcebook, which sets out rules and guidance for how regulated firms must interact with clients, market products, and provide advice.

What is the main purpose of COBS?

Its goal is to ensure firms act honestly, fairly, and professionally in the best interests of clients, with clear, fair, and not misleading communications.

Where can I find the full COBS rules?

The complete COBS section is available in the FCA Handbook, which is updated frequently.

Who needs to comply with COBS rules?

Any FCA‑regulated firm carrying out designated investment business, ancillary services, or insurance‑related activities in the UK, including advisers, brokers, wealth managers, and investment platforms must comply.

Who do the FCA Principles apply to?

They apply to all FCA‑regulated firms and individuals performing controlled functions, regardless of size or sector.

How are the FCA Principles enforced?

The FCA enforces the Principles through regulatory, civil, and criminal powers, including fines, public censures, and prohibitions. Their approach is detailed in the FCA Enforcement Guide.

What happens if a firm fails to notify the FCA of an issue?

Firms are required to notify the FCA promptly of any matters that could have a significant adverse impact on their ability to meet regulatory requirements. Failure to do so can result in enforcement action, including fines or other sanctions.

How can firms ensure compliance with the FCA Principles?

Firms can ensure compliance with the FCA Principles by implementing robust governance frameworks, conducting regular risk assessments, and maintaining effective internal controls. This includes establishing clear policies and procedures, providing ongoing staff training, and fostering a culture of compliance throughout the organisation.

How often should FCA Code of Conduct training be refreshed to remain effective?

Firms should refresh Code of Conduct training at least annually, or more frequently if there are significant regulatory updates, changes in business processes, or lessons learned from compliance breaches. Regular refreshers help maintain awareness and reinforce the expected behaviours across the organisation.

How can firms tailor Code of Conduct training for high‑risk business areas?

Training should be customised to reflect the specific risks and responsibilities of high-risk areas, such as trading desks or advisory teams. This can include scenario-based exercises, role-specific guidance, and practical examples relevant to the department’s day-to-day activities, ensuring staff understand the real-world implications of the Conduct Rules.

What tools or technology can support ongoing compliance monitoring?

Firms can leverage compliance monitoring software to track employee behaviour, trade activity, and adherence to policies. This includes workflow tracking, automated alerts, data analytics, and communication surveillance systems to identify potential breaches quickly and efficiently.

What steps can be taken to rebuild trust after a breach of the Conduct Rules?

Rebuilding trust requires transparency, accountability, and proactive remediation. Firms should promptly investigate the breach, implement corrective measures, communicate clearly with stakeholders, and enhance training and oversight to prevent recurrence. Demonstrating a strong culture of compliance and ethical behaviour is key to restoring confidence among clients, staff, and regulators.

Who needs to comply with CASS rules?

Any firm regulated by the FCA that holds or controls client money or assets must comply with CASS rules. This includes investment firms, asset managers, and certain insurance intermediaries.

How often should firms review their CASS compliance procedures?

Firms should review their procedures at least annually, or whenever there are changes in regulation, business structure, or risk exposure. Regular internal audits and gap analyses are recommended.

What role does staff training play in CASS compliance?

Training is critical. Staff must understand their responsibilities under CASS, know how to handle client money and assets correctly, and be able to identify and escalate potential breaches.

How can I log and track incidents of financial crime in my organisation?

Our Compliance Breach Register allows you to securely log and monitor incidents of financial crime, such as bribery or money laundering. The tool enables you to track resolution progress and maintain a clear audit trail, ensuring accountability and compliance with regulatory requirements.

How can I ensure my employees understand and comply with our internal policies in relation to financial crime?

Our Policy Hub enables you to distribute policies such as your Anti-Money Laundering (AML) policy to employees, track acknowledgements, and send automated reminders. This ensures everyone understands their obligations and helps you maintain compliance with financial crime regulations.
.

Can small businesses be held accountable under competition law?

Yes. Competition law applies to businesses of all sizes. Even small companies can face investigations and serious penalties for engaging in anti-competitive conduct.

Are informal conversations with competitors risky?

Absolutely. Informal chats, especially those involving prices, market plans, or customers, can constitute unlawful agreements and should be avoided.

What are the consequences of breaking competition law?

Violations can lead to heavy fines for companies, director disqualification, criminal prosecution, and reputational damage.

How can companies prevent anti-competitive behaviour?

By implementing regular compliance training, setting clear internal policies, encouraging reporting of concerns, and ensuring employees understand the legal risks.

Does the Criminal Finances Act 2017 apply to non-UK companies?

Yes. The Act can apply to overseas entities if any part of the tax evasion facilitation occurs within the UK or involves UK tax liabilities. Multinational firms with UK operations should take note.

What industries are most at risk under the Criminal Finances Act?

Industries with complex financial transactions, high-value assets, or extensive third-party relationships such as banking, legal services, real estate, and professional consulting are particularly exposed to conduct and facilitation risks.

How often should businesses review their tax evasion prevention procedures?

Best practice is to conduct reviews annually or whenever there are significant changes in business operations, regulatory guidance, or risk exposure. Regular audits help ensure ongoing compliance.

Can small businesses be prosecuted under the Criminal Finances Act 2017?

Yes. The Act applies to all organisations, regardless of size. However, the HMRC’s guiding principles allow for proportionality, meaning smaller firms are expected to implement controls that match their risk level and operational complexity.

What industries are most vulnerable to proliferation financing risks?

Industries dealing with dual-use goods, advanced technologies, chemicals, and logistics are particularly exposed. Financial institutions supporting international trade also face elevated risks.

How can small businesses ensure compliance with proliferation financing regulations?

Even SMEs should implement basic risk assessments, maintain up-to-date sanctions screening tools, and train staff on red flags related to trade-based money laundering and dual-use items.

Are there international standards for combating proliferation financing?

Yes. The Financial Action Task Force (FATF) provides global guidelines, including Recommendation 7, which focuses on targeted financial sanctions related to proliferation.

What are “dual-use goods” and why are they significant?

Dual-use goods are items that can serve both civilian and military purposes. Their trade is tightly regulated due to the potential for misuse in weapons development.

How often should proliferation financing risk assessments be updated?

Best practice suggests reviewing risk assessments annually or whenever there are significant changes in business operations, customer profiles, or geopolitical developments.

How can I ensure employees are aware of our Fraud Prevention policies and procedures? 

Our Policy Hub makes it easy to distribute your Fraud Prevention policies to all employees and track their acknowledgement. You can set up automated reminders to ensure that employees review and agree to comply with these policies, providing a clear record of engagement to support compliance.

How can employees report suspicions of fraud anonymously?

Our Whistleblowing Register provides a secure and anonymous platform for employees to report any suspicions of fraud. This tool ensures that employees can raise concerns without fear of retaliation, allowing your organisation to address potential issues promptly and transparently.

How can I make sure every employee has read and agreed to our anti-fraud and conduct policies?

Our Policy management ensures employees review and acknowledge key anti-fraud and conduct policies, creating a clear audit trail for regulators. You can manage policy updates, track completions, and demonstrate compliance—all from one place.

How can I measure my employees’ awareness of fraud risks and identify gaps in understanding?

Our Fraud Prevention Staff Survey helps you gauge staff awareness of fraud risks and pinpoint areas that need attention before issues arise. You can run periodic surveys to monitor culture, track improvements over time, and target further training.

How can I provide employees with a safe and anonymous way to report suspected fraud?

Our Whistleblowing Register gives employees a confidential channel to report potential fraud without fear of retaliation. This demonstrates to regulators that you take whistleblower protections seriously and encourages a culture of transparency.

Which principle is most important in an insurance contract?

Utmost good faith is the most critical, requiring both parties to disclose all material facts. Without it, contracts risk being invalidated under UK insurance law.

What is proximate cause in insurance?

It is the dominant, effective cause of loss, not merely the last or nearest event. Courts use proximate cause to determine whether a peril covered by the policy actually triggered the claim.

How does the principle of indemnity work in real-life claims?

The principle of indemnity ensures you’re restored to your pre-loss financial state, not profiting from claims. For example, if your insured car repair costs £9,000, the insurer pays that amount, not the full policy limit.

What is SMCR?

There are three key parts to the SMCR: Senior Managers Regime, Certified Persons Regime and Conduct Rules.

Senior Managers Regime
This enforces a detailed and clear allocation of responsibilities between senior managers at each firm, with particular emphasis placed on key documents - 'Statements of Responsibilities' and 'Responsibilities Maps'. These help to record the distribution of responsibility to individual Senior Managers and to demonstrate to the regulators that there are no gaps or excessive overlaps.

Always bear in mind that Senior Managers have a statutory duty of responsibility "to take reasonable steps to prevent regulatory breaches in the areas of the firm for which they are responsible".
Certification Regime
This requires firms to check and confirm that employees performing roles relating to the firm's regulated activities are fit and proper, based on their qualifications, competence and personal characteristics.

Once this has been confirmed, the firm needs to issue them with a certificate that must be renewed every year.
Conduct Rules
This consists of a set of rules provided in the FCA's Code of Conduct Handbook (COCON) that covers all individuals: Senior Managers, Certified Persons and other employees.

What is the scope of the SMCR?

SMCR rollout waves
The SMCR has been rolled out in three waves:

Wave 1: Banks, building societies, credit unions and large investment firms in March 2016 (updated July 2018)
Wave 2: Extended to insurance firms (those regulated by the FCA and PRA) in December 2018
Wave 3: The remaining financial services firms (otherwise known as 'solo-regulated firms' since they are regulated only by the FCA, not the FCA and PRA) came under the scope of this regime in December 2019.

SMCR categories
The range of firms in the third wave is very diverse. Consequently, the FCA has grouped them into three categories to ensure that the regulation is proportionate to their sizes and activities:

Core: Firms that have to comply with the baseline requirements for solo-regulated firms
Limited scope: Firms that already had exemptions under the Approved Persons Regime, and are exempt from some requirements and require fewer senior management functions
Enhanced: Firms that have extra requirements - these are large, complex firms with potential impact on consumers or markets which warrant more attention from the FCA

What's needed to comply with SMCR?

  1. Statement of Responsibilities - Set out the areas for which each Senior Manager is personally accountable
  2. Responsibilities Map - This knits together the Statement of Responsibilities
  3. Pre-approval for all Senior Managers - obtain this from the regulators before they carry out their roles
  4. Duty of Responsibility - Ensure that Senior Managers understand their responsibilities and take reasonable steps to prevent regulatory breaches in their areas of responsibility
  5. Identify all Certified Persons - These are all material risk takers
  6. Fit and Proper Assessment - Of all Certified Persons, then re-assess on an annual basis
  7. Training - Of all those who are subject to the Conduct Rules

SMCR Training

To stay on the right side of the FCA's guidance, all firms must ensure that all employees subject to the conduct rules are notified and provided with 'suitable' training.

Such training must result in employees gaining awareness and a broad understanding of all of the conduct rules, as well as a deeper understanding of the practical application of the specific rules which are relevant to their work.

To help with SMCR implementation, we have created a 3-step training model.

We provide a comprehensive set of SMCR training courses for all financial firms, including banking, insurance and solo-regulated firms.

Duty of Responsibility

Senior Managers have a statutory duty of responsibility "to take reasonable steps to prevent regulatory breaches in the areas of the firm for which they are responsible".

The FCA can take action against a Senior Manager (SM) where it can show that:
There was misconduct by the SM's firm,
At the time of the misconduct or during any part of it, the SM was responsible for the management of any of the firm's activities in relation to which the misconduct occurred, and the SM did not take such steps as a person in their position could reasonably have been expected to take to avoid the misconduct occurring or continuing.


The burden of proof for all these elements lies on the FCA. The SM does not need to show that they took reasonable steps - rather, it is for the FCA to prove that they did not. The defence against such action is if the senior manager can show that they took "the steps that are reasonable for a person in that position to take to prevent a regulatory breach from occurring".

Fitness and Propriety

The FCA must approve all senior managers, which assess whether they are fit and proper to perform the given function or responsibility.

Three key factors determine whether you are Fit and Proper:
Honesty, integrity and reputation
Competence and capability
Financial soundness


When determining a person's financial soundness, the FCA will not normally require a statement of assets or liabilities of the person. Limited financial means does not in itself affect the suitability of a person to perform an SMF.

When appointing a Senior Manager or Certified Person, firms must obtain a regulatory reference from all their past employers going back six years. This requirement also applies when appointing NEDs who are not Senior Managers.

For this purpose, firms need to retain records of disciplinary and fit and proper findings going back six years and not enter into arrangements that conflict with their disclosure obligations.

What are the SMCR Conduct Rules?

SMCR incorporates new high-level standards of behaviour that apply to almost all employees who carry out financial services activities in a firm. Some Conduct Rules apply to all employees, while others apply only to Senior Managers.

The Conduct Rules are intended to drive up standards of individual behaviour in financial services. By applying them to a broad range of staff, the FCA aims to improve individual accountability and awareness of conduct issues across firms.

Individual Conduct Rules (ICRs)
These apply to all employees, with the exception of ancillary staff, such as facility managers, personal assistants, receptionists, medical staff, IT and HR, who perform a purely non-financial service's role. These ICRs also apply to Non-Executive Directors.
ICR 1: You must act with integrity
ICR 2: You must act with due skill, care and diligence
ICR 3: You must be open and cooperative with the FCA, the PRA and other regulators
ICR 4: You must pay due regard to the interests of customers and treat them fairly
ICR 5: You must observe proper standards of market conduct

Senior Manager Conduct Rules (SMCRs)
These apply only to Senior Managers, including NEDs (SC 4 even applies to out of scope NEDs)
SC 1: You must take reasonable steps to ensure that the business of the firm for which you are responsible is controlled effectively
SC 2: You must take reasonable steps to ensure that the business of the firm for which you are responsible complies with the relevant requirements and standards of the regulatory system
SC 3: You must take reasonable steps to ensure that any delegation of your responsibilities is to an appropriate person and that you oversee the discharge of the delegated responsibility effectively
SC 4: You must disclose appropriately any information of which the FCA or PRA would reasonably expect notice

What does SMCR Best Practice look like?

Stay up to date with SMCR best practices, industry insights and key trends across regulatory compliance, digital learning, EdTech and RegTech by subscribing to the Skillcast Compliance Bulletin.

3-Step SMCR Training Model
Whether you're new to the SMCR or benchmarking existing processes, our training model will help get your compliance training on track.

FCA Conduct Rules Training Aid
Our desk aid has ten tips on how to ensure your staff fully understand and adhere to conduct rules.

FCA COCON Breaches Desk Aid
Our desk aid reminds all of your staff fully of the ten easiest ways to breach the FCA Code of Conduct.

Operational Resilience Implementation Checklist
Ensure your firm follows the FCA guidelines for a compliant operational resilience programme.

Fit and Proper Training Presentation
Firms need to assess the Fitness and Propriety (F&P) of Senior Managers and Certified Persons when they are appointed and on an ongoing basis. Our F&P training presentation uses scenarios to help explain this further.

SMCR & Non-financial Misconduct
A lack of public confidence and some damaging press stories have renewed the FCA's focus on conduct, including non-financial misconduct. Find out more, including a free training module and a desk aid.

SMCR Solo-Regulated Firms Key Questions Answered
We answer the questions every solo-regulated firm has been asking.

SMCR Insurance Firms Key Questions Answered
We also answer the questions every insurance firm has been asking.

How to Evidence your SMCR Competence
If you cannot articulate what is adequate and competent within your firm, you simply won't be able to evidence SMCR compliance when the FCA comes knocking!

How to Prevent SMCR Training Damaging Staff Motivation
SMCR created a step-change in personal accountability, causing a headache, especially when dealing with those who've never been accountable before. That's why it's important to take steps to address any issues before they spiral out of control.

 

 

What are the SMCR Functions?

The Senior Managers Regime (SMR) applies to those who perform a Senior Management Function (SMF). The FCA has classified specific functions as SMFs, so that it knows who a firm's senior decision-makers are, and to make sure that firms clearly allocate specific responsibilities to those key individuals.

In certain circumstances, firms can have more than one individual performing a single SMF. However, the FCA expects that SMFs are only shared where it is justified and appropriate.

 

The list of SMFs that apply depends on the type of firm.

5.1 Governing Function SMFs

SMF1 Chief Executive Core and Enhanced firms
SMF3 Executive Core and Enhanced firms
SMF7 Group Entity Senior Manager Enhanced firms only
SMF 9 Chair (non-executive) Core and Enhanced firms
SMF10 Chair of the Risk Committee Enhanced firms only
SMF11 Chair of the Audit Committee Enhanced firms only
SMF12 Chair of the Remuneration Committee Enhanced firms only
SMF13 Chair of the Nominations Committee Enhanced firms only
SMF14 Senior Independent Director Enhanced firms only
SMF27 Partner Core and Enhanced firms

5.2 Required Function SMFs

SMF16 Compliance oversight Core and Enhanced firms (and sole traders, authorised professional firms and oil market participants)
SMF17 Money Laundering Reporting officer Core and Enhanced firms and (and sole traders and oil market participants)
SMF18 Other Overall Responsibility Enhanced firms only
SMF29 Limited Scope Function Limited Scope firms (e.g. limited permission consumer credit firms, authorised professional firms, firms that intermediate insurance without this being principal business)

 

The Overall Responsibility requirement means that an Enhanced firm will need to make sure that every activity, business area and management function has a Senior Manager with overall responsibility for it. This is to prevent an unclear allocation of responsibilities.

Overall Responsibility means that a Senior Manager:

  • Has ultimate responsibility for managing or supervising a function
  • Briefs and reports to the governing body about their area of responsibility
  • Puts matters requiring decisions about their area of responsibility to the governing body

5.3 Systems and Control SMFs

SMF2 Chief Finance Function Enhanced firms only
SMF4 Chief Risk Function Enhanced firms only
SMF5 Head of Internal Audit Enhanced firms only
SMF24 Chief Operations Function Enhanced firms only

What are the required responsibilities under the SMCR Responsibilities

You need to be aware that there are more responsibilities for Senior Managers than just the ones found within each SMF's definition. The regulators have listed certain 'Prescribed Responsibilities' (PRs) that each firm is required to allocate between Senior Managers.

Each PR would generally be allocated to the Senior Manager who performs the SMF most closely linked to the given responsibility. PRs can be shared but not split between Senior Managers. Where responsibility is shared, it is recorded identically in each of the Senior Manager's Statements of Responsibilities.

If there is a breach, all Senior Managers sharing that responsibility may be required to demonstrate that they took reasonable steps to prevent or stop the breach.

The list of PRs that applies depends on the type of firm. Responsibilities (a), (b), (b-1), (d) below cannot be allocated to SMF 18 (Other Overall Responsibility) and responsibilities (j), (k), (l) below should be performed by a non-executive director if possible.

(a) Performance by the firm of its obligations under the SMR, including implementation and oversight All firms
(b) Performance by the firm of its obligations under the Certification Regime All firms
(b-1) Performance by the firm of its obligations in respect of notifications and training of the Conduct Rules All firms
(d) Responsibility for the firm's policies and procedures for countering the risk that the firm might be used to further financial crime All firms
(z) Responsibility for the firm's compliance with CASS (if applicable) All firms
(c) Compliance with the rules relating to the firm's Responsibilities Map Enhanced firms only
(j) Safeguarding and overseeing the independence and performance of the internal audit function (in accordance with SYSC 6.2) Enhanced firms only
(k) Safeguarding and overseeing the independence and performance of the compliance function (in accordance with SYSC 6.1) Enhanced firms only
(l) Safeguarding and overseeing the independence and performance of the risk function (in accordance with SYSC 7.1.21R and SYSC 7.1.22R) Enhanced firms only
(j -3) If the firm outsources its internal audit function, taking reasonable steps to ensure that every person involved in the performance of the service is independent from the persons who perform external audit, including supervision and management of the work of outsourced internal auditors, and management of potential conflicts of interest between the provision of external audit and internal audit services Enhanced firms only
(t) Developing and maintaining the firm's business model Enhanced firms only
(s) Managing the firm's internal stress tests and ensuring the accuracy and timeliness of information provided to the FCA for the purposes of stress-testing Enhanced firms only
(za) Responsibility for an AFM's assessments of value, independent director representation and acting in investors' best interests Authorised Fund Managers

Who is responsible for assessing competence?

First‑line managers should take ownership of defining and assessing competence for their teams. HR and Compliance act as second‑line functions, providing oversight and challenge rather than controlling the process.

What types of evidence can demonstrate competence?

Effective evidence includes a mix of qualifications, ongoing assessments, case‑based testing, observation of performance, and documented examples of sound decision‑making in practice.

How often should competence be reviewed?

Competence should be assessed at least annually as part of the certification process, and more frequently if there are changes in role, regulation, or performance concerns.

Are Skillcast courses SCORM-compliant?

Yes. This means they can be delivered via the Skillcast Portal or any other SCORM-compliant Learning Management System.

What other tools are needed beyond training?

A comprehensive compliance solution often needs more than just training. Alongside e-learning, tools like declarationssurveys, and registers that track compliance tasks are usually essential. Skillcast provides full support to help you set up these additional tools.

Is our training content still compliant with the latest legislation?

  • You can check the latest course content updates in our library updates page: https://www.skillcast.com/compliance-course-library-updates
  • For major legislative changes, we:
    • Will send you email alerts to ensure you are notified
    • Offer you a free trial of newly created or updated content
    • Host webinars with compliance experts to explain the changes and how our training supports your ongoing compliance

Can you translate our content into other languages?

Yes, we offer translations in a wide range of languages. Let us know your needs, and we’ll confirm availability or work with you to plan translations for your selected modules.

What file types are supported by the Skillcast system?

Features

Supported file types and details

File Exchange

File types: PDF, Excel spreadsheets, Word documents, SCORM and xAPI files, and compressed zip files. Max file size: Default is 1GB, can be increased to a max of 2GB

SCORM files

Versions: SCORM 1.2, SCORM 1.2 for Moodle, SCORM 2004 2nd, 3rd and 4th Edition. Max file size: 1024MB

xAPI file

Max file size: 2GB

Videos

File types: MP4 or MOV. Videos must be optimised, with a max file size of 100MB. If the file is bigger, our Design Team can help

Images

File types: jpg, png and gif. The file size should ideally be 100KB, but it can be up to 250KB

CPD evidence

File types: Word, PDF, Excel and CSV. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB

Policy documents

PDF or Word File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB

Offline activities evidence

File types: PDF, DOC, DOCX, XLS, XLSX, CSV, PNG, GIF, JPEG, JPG, PPTX and MSG. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB

Client logo files

File types provided by client: EPS, PDF, AI and SVG

Registers

PDF, DOC, DOCX, XLS, XLSX, CSV, PPT, PPTX, POT, PPA, PPS, JPG, JPEG, PJEPG, PNG, BMP, GIF, MP4, MOV, WMV, CPTX, CP, TXT, ZIP and MSG files

Declarations

JPG, JPEG, PNG, GIF, XLS and XLSX files