The New Pressure on Third Party Oversight
PS26/2 asks in-scope firms to do something many have never had to do in one place: identify every material third party arrangement, evidence how they judged it material, and hand the FCA a structured register of it. Arrangements are far wider than outsourcing. Software, cloud, group services and, for insurers, delegated underwriting all count.
The common thread is evidence. Dates of risk assessments, due diligence outcomes, governance sign-off, key subcontractors and exit options all sit in the register template. Firms still relying on spreadsheets and email trails will find that hard to produce on request.