How to Prepare a Credible FCA Threshold Conditions Attestation Under Supervisory Pressure

An attestation request following supervisory concern is not a form-filling exercise. It is a test of whether the senior individual signing understands the firm well enough to stand behind a statement that it meets, and will continue to meet, the Threshold Conditions. Get this wrong and the FCA's next step is rarely lighter touch supervision.

Start by understanding what you are actually being asked to attest to

Threshold Conditions attestations vary. Some focus on a single condition, typically COND 2.4 (appropriate resources) or COND 2.5 (suitability), where supervisors have identified weakness. Others are broader. Read the request carefully: what is the precise wording, what period does it cover, who is being asked to sign, and what is the FCA expected to do with it.

If the scope is ambiguous, clarify with your supervisor in writing before you begin. An attestation given against a misunderstood question is worse than none.

Treat the underlying concerns as the real subject

The attestation is downstream of the supervisory concern. If the FCA has flagged governance weakness, financial resource fragility, conduct failings, or data integrity problems, these are what must be addressed. A credible attestation describes:

• What the issues were, in the FCA's terms, not sanitised management language.
• The root cause analysis, including what the firm missed and why.
• The remediation completed, with evidence of effectiveness, not just activity.
• What remains open, with dates, owners, and assurance arrangements.

Attempting to characterise significant issues as minor, or presenting incomplete remediation as done, is the single most common path to escalation, enforcement referral, or a Section 166.

Build the evidence base before drafting

The signer needs a defensible file. For each Threshold Condition in scope, assemble: current position, supporting data, independent assurance where relevant (internal audit, compliance monitoring, external review), board and committee minutes showing oversight, and management information showing the position is stable, not a snapshot.

Where the concern touches resources, this means capital and liquidity forecasts stress-tested against plausible downside, not base case comfort. Where it touches suitability or governance, it means SMF accountability maps, succession, skills assessments, and evidence that the board actually challenges.

Get the board properly involved

Even where a single SMF signs, the board must own the position. Schedule a board session with sufficient time, not an any other business item. Present the draft attestation, the evidence pack, and the residual risks. Record the challenge in the minutes. If non-executives are not comfortable, the attestation is not ready.

Where there is genuine disagreement between the signer, the board, and second or third line, resolve it before submission. Submitting over unresolved internal dissent is a serious risk to the individual signing.

Draft with precision

Use the FCA's language. Attest only to what you can evidence. If you cannot attest without qualification, qualify. A qualified attestation that accurately describes residual issues and the plan to close them is generally received better than an unqualified one that unravels on inspection.

Avoid: aspirational statements, reliance on controls not yet operating, assurance by assertion, and quoting policy rather than practice.

Prepare for what comes next

Assume the FCA will test the attestation. That may be follow up questions, a supervisory meeting, a visit, or a skilled person review. The evidence file should be ready to hand over the day after submission. The signer should be rehearsed on the basis of their opinion and the limits of what they attested to.

The decision point

Before signing, ask one question: if the FCA interviewed me under caution tomorrow about this attestation, would the file and my recollection support every sentence. If the answer is anything other than yes, the attestation is not ready, and the right action is to go back to the supervisor, explain where you are, and agree a revised timeline or scope.

Frequently Asked Questions

Who should sign the attestation?

Usually the SMF most directly accountable for the area of concern, often the CEO, CFO, or Chair depending on scope. The FCA will sometimes specify. Do not delegate signing to someone without the standing or knowledge to defend it.

Can we qualify an attestation?

Yes, and sometimes you should. A precise, qualified attestation that describes what is and is not yet in place is more credible than an unqualified one the firm cannot fully stand behind.

What if the board and the signing SMF disagree?

Do not submit. Unresolved disagreement surfaces later and damages both the firm and the individual. Work it through, take external advice if needed, and tell the supervisor you need more time.

How long should the preparation take?

For a substantive attestation following material supervisory concern, four to eight weeks of focused work is typical. Compressing this invites errors. If the FCA's timetable is shorter than the work requires, ask for an extension and explain why.

Should we involve external advisers?

For significant attestations, independent review of the evidence base and drafting by legal or specialist regulatory advisers is sensible. It is not a substitute for internal ownership, but it tests whether the position would hold up.