How to Prepare for an FCA Supervisory Visit: A Practical Guide
This guide sets out how senior leaders should prepare for an FCA supervisory visit, from initial notification through to post-visit follow-up. After reading, you will know what to prioritise, who to involve, and how to handle the moments where firms most often stumble.
If the FCA has scheduled a supervisory visit, the quality of your preparation in the next few weeks will shape the supervisor's view of your firm for years. Visits are not audits. They are judgement-forming exercises. Supervisors are testing whether the tone from the top, the control environment, and the culture you describe on paper match what they see in the room. This guide explains how to prepare properly, what most firms get wrong, and where senior leaders need to spend their personal time.
Key Executive Takeaways
- FCA supervisors form their view as much from how executives answer as from what documents show, so rehearsal and consistency across the leadership team matter more than volume of material.
- The biggest failures are not technical gaps but tone: defensiveness, over-scripted answers, or a gap between the CEO's narrative and what middle management actually says.
- Treat the visit as the start of a supervisory relationship, not an event to survive, and structure your follow-up accordingly.
Decode the request before you respond
Read the notification letter carefully. The FCA signals its focus through the documents it asks for, the roles it wants to meet, and the language it uses. A request for MI on vulnerable customers alongside interviews with front-line staff is a Consumer Duty review in all but name. A request for board packs, risk appetite statements, and time with NEDs is a governance review. Map the request to the likely thematic driver, then brief your executive team on what you think the FCA is really testing. Getting this wrong wastes preparation time on the wrong evidence.
Build the evidence pack, then pressure-test it
Assemble the requested documents, but do not stop there. For each area in scope, prepare a short internal narrative: what the firm does, what the risks are, how you know the controls work, and where you are still improving. Honest acknowledgement of work-in-progress lands better than a polished story that collapses under questioning.
Then pressure-test it. Get someone senior who was not involved in writing the pack, ideally an independent adviser or a former regulator, to interrogate it. If your Head of Compliance cannot explain in two minutes how a specific control operates end to end, neither will they on the day.
Prepare the people, not just the papers
This is where most firms under-invest. Identify everyone the FCA will meet, from the Chair down to first-line staff, and run structured preparation sessions. Cover:
- The three or four messages each person should be able to deliver clearly.
- The known weak spots and how to talk about them honestly.
- The behavioural cues supervisors watch for: eye contact between executives, who defers to whom, whether the SMF holder actually knows the detail.
Avoid scripting. Supervisors detect it immediately and it undermines credibility. Aim for consistency of substance, not identical words.
Watch for the gap between top and middle
The single most damaging finding is a disconnect between what the CEO says the firm values and what a team leader two levels down describes as daily reality. Before the visit, sample this yourself. Sit in on a complaints call. Ask a junior analyst how they raise concerns. If the answers do not match your board narrative, you have a problem the FCA will find in half a day.
Manage the visit itself
Appoint a single visit coordinator, usually the Chief Compliance Officer or a senior deputy, who owns logistics, document flow, and daily debriefs. Hold a short internal huddle at the end of each day to identify follow-up questions and correct any inaccuracies promptly, in writing. Supervisors respect firms that self-correct quickly.
Do not try to steer the agenda. Answer what is asked, offer context where useful, and resist the temptation to volunteer information outside scope.
Plan the follow-up before the visit ends
By the closing meeting, you should already have a draft internal plan for how you will respond to likely findings. When the feedback letter arrives, typically four to twelve weeks later, your remediation plan should be substantially ready. Firms that respond within days, with dated commitments and named owners, reset the supervisory relationship on a stronger footing.
The decision point
Before preparation begins, the CEO and Chair need to agree one thing: what impression do we want this supervisor to leave with? Write it down in a sentence. Every preparation choice, from who attends which session to how much detail goes into the pack, should serve that objective. If you cannot answer that question clearly, start there.
Frequently Asked Questions
How much notice does the FCA usually give?
Typically four to eight weeks for a scheduled supervisory visit, though thematic or for-cause visits can be shorter. Short notice is itself a signal. Treat it as such.
Should we involve external advisers?
Yes, but selectively. Use them to pressure-test your evidence and prepare executives, not to write the story. Supervisors can tell when a firm's narrative has been outsourced.
What should the Board's role be?
NEDs should be visibly engaged in preparation, briefed on the likely lines of questioning, and able to describe how they hold management to account with specific examples. Generic answers about board effectiveness are a red flag to supervisors.
How do we handle a question we cannot answer?
Say so, commit to a timeframe for a written response, and deliver early. Guessing or waffling causes more damage than a straightforward acknowledgement.
What is the biggest mistake firms make?
Treating the visit as a compliance exercise rather than a leadership one. The FCA is assessing judgement, culture, and accountability. Those are executive questions, not compliance ones.
Frequently asked questions
How much notice does the FCA usually give?
Typically four to eight weeks for a scheduled supervisory visit, though thematic or for-cause visits can be shorter. Short notice is itself a signal. Treat it as such.
Should we involve external advisers?
Yes, but selectively. Use them to pressure-test your evidence and prepare executives, not to write the story. Supervisors can tell when a firm's narrative has been outsourced.
What should the Board's role be?
NEDs should be visibly engaged in preparation, briefed on the likely lines of questioning, and able to describe how they hold management to account with specific examples. Generic answers about board effectiveness are a red flag to supervisors.
How do we handle a question we cannot answer?
Say so, commit to a timeframe for a written response, and deliver early. Guessing or waffling causes more damage than a straightforward acknowledgement.
What is the biggest mistake firms make?
Treating the visit as a compliance exercise rather than a leadership one. The FCA is assessing judgement, culture, and accountability. Those are executive questions, not compliance ones.
Related guides
What Makes a Decision Defensible to Regulators: A Practical Guide
This guide explains what regulators actually look for when they test a major decision after the fact, and how to build defensibility into the decision itself rather than reconstruct it later. You will finish with a clear view of what to document, who to involve, and where most firms leave themselves exposed.
Board Accountability in Regulated Industries: A Practical Guide
This guide sets out what board accountability actually means in regulated financial services and how directors can demonstrate it under regulatory scrutiny. After reading, you will know how to structure oversight, evidence judgement, and avoid the common failures that turn ordinary decisions into personal liability.
How to Prepare a Regulatory Filing With Stakeholder Risk Assessment
A practical guide to embedding stakeholder risk assessment into a regulatory filing so it reads as credible, evidenced, and decision-ready. After reading, you will know how to sequence the work, what supervisors actually look for, and where filings typically fall apart.
How to Handle a Pre-Emptive Regulator Meeting After a Governance Failure
This guide covers how to prepare for and run a self-initiated regulator meeting when you have discovered a material governance failure inside your firm. After reading, you will know how to sequence the disclosure, frame the failure, and position remediation in a way that preserves credibility and controls the supervisory response.
How to Structure a Section 166 Response That Preserves Board Credibility
A practical guide to responding to a Skilled Person review in a way that protects the board's standing with the regulator. Covers how to sequence the engagement, where boards typically damage their own credibility, and how to convert findings into a credible remediation posture.
Where internal confidence may exceed external evidence
Polar Insight helps leadership teams test critical assumptions against stakeholder, market, regulatory, and operational reality before risk compounds.
Explore Stakeholder Proximity