Skip to main content

How to Prepare for an FCA Supervisory Visit: A Practical Guide

This guide sets out how senior leaders in regulated firms should prepare for an FCA supervisory visit, from initial notification through to post-visit follow-up. After reading, you will know how to organise your evidence, brief your people, and engage the supervisory team credibly.

An FCA supervisory visit is not a test to be gamed. It is an opportunity to demonstrate that your firm understands its risks, runs itself well, and takes its obligations seriously. Preparation is about being able to show that clearly and honestly, with evidence, when the supervisor sits down at your table. This guide covers how to prepare properly, from the moment notification lands to the follow-up actions that shape the supervisor's view of your firm long after they leave.

Key Executive Takeaways

  • Preparation should focus on evidencing how your firm actually operates and manages risk, not on rehearsing a polished narrative for the visit itself.
  • The most common failure is inconsistency between what senior leaders say, what documents show, and what front-line staff describe when asked directly.
  • The visit is a supervisory relationship moment, not a one-off event: how you respond to findings matters as much as how you present on the day.

Understand the Scope Before You Do Anything Else

When the notification arrives, resist the reflex to mobilise everyone immediately. Read the scoping letter carefully. Identify the supervisory strategy behind it: is this a routine periodic assessment, a thematic review, a follow-up to a prior concern, or triggered by data, complaints, or a specific event? The framing shapes everything that follows.

Clarify with the case officer, in writing, exactly what documents, people, and systems will be in scope. Ask about format, duration, and whether interviews will be structured or exploratory. Do not try to narrow the scope inappropriately, but do make sure you understand it precisely so you can prepare fully.

Get Your Evidence in Order

The FCA will assess whether your governance, risk management, and controls work in practice, not just on paper. That means your document pack needs to show live processes: minutes with real debate, MI that shows issues being spotted and addressed, risk registers that have evolved, breach logs with clear remediation trails.

Where weaknesses exist, do not hide them. Supervisors are experienced at spotting gaps and will trust you more if you have already identified and are actively addressing them. A firm that says "we found this, here is our remediation plan, here is progress to date" is in a stronger position than one that presents everything as fine.

Brief Your People Honestly

Everyone the supervisor is likely to meet should understand why the visit is happening, what areas will be covered, and how to answer questions clearly and truthfully. This is not media training. It is making sure people can describe their actual role, the risks they own, and how they escalate concerns.

What goes wrong: senior leaders give a confident strategic account, then a team leader two floors down describes a different reality. Or an SMF holder cannot articulate the MI they receive. Run internal walkthroughs with the people who will be interviewed. If gaps in understanding emerge, address the underlying issue, not just the answer.

Test Your Consumer Duty and Conduct Story

For most firms in scope, expect Consumer Duty, operational resilience, financial crime controls, and vulnerability handling to feature. Be able to show outcomes data, not just policy. If you have identified poor outcomes for a customer group, be ready to explain what you have done about it.

During the Visit

Designate a single coordinator to manage logistics, information requests, and follow-ups. Take contemporaneous notes of every session. If a question cannot be answered accurately in the room, say so and commit to a written response within a defined timeframe. Never guess.

After the Visit

The follow-up phase is where firms often lose ground. Respond to information requests promptly and completely. When the supervisory feedback arrives, treat findings as a genuine input to your risk and governance work, not a document to negotiate down. Build a remediation plan with owners, deadlines, and board oversight, and report progress proactively.

The Decision Point

Before the visit, ask your executive team one question: if the supervisor spoke to any ten people in this firm at random, would they hear a consistent, credible account of how we manage our risks and serve our customers? If the answer is no, that is where your preparation effort should focus, well before the visit itself.

Frequently Asked Questions

How much notice will we get?

It varies. Routine visits typically come with several weeks' notice. Reactive or issue-driven visits can be much shorter. Your preparedness should not depend on notice period.

Should we involve external advisers?

Useful for stress-testing your evidence and interview readiness, particularly if the visit follows a specific concern. Do not let advisers filter your engagement with the supervisor: the FCA expects to deal directly with your accountable people.

Who should attend from the executive?

The SMF holders accountable for the areas in scope, plus the chair of the relevant board committee where appropriate. Do not overload the room. Supervisors want to hear from the people who actually own the risks.

What if we identify a serious issue during preparation?

Disclose it through the appropriate channel, usually Principle 11, before the visit. Discovering an issue and sitting on it until the supervisor finds it independently is far more damaging than raising it proactively.

Frequently asked questions

How much notice will we get?

It varies. Routine visits typically come with several weeks' notice. Reactive or issue-driven visits can be much shorter. Your preparedness should not depend on notice period.

Should we involve external advisers?

Useful for stress-testing your evidence and interview readiness, particularly if the visit follows a specific concern. Do not let advisers filter your engagement with the supervisor: the FCA expects to deal directly with your accountable people.

Who should attend from the executive?

The SMF holders accountable for the areas in scope, plus the chair of the relevant board committee where appropriate. Do not overload the room. Supervisors want to hear from the people who actually own the risks.

What if we identify a serious issue during preparation?

Disclose it through the appropriate channel, usually Principle 11, before the visit. Discovering an issue and sitting on it until the supervisor finds it independently is far more damaging than raising it proactively.

Related guides

Boards, Governance & Defensibility

How to Structure an SM&CR Statement of Responsibilities to Avoid Accountability Gaps

This guide sets out how to draft a Statement of Responsibilities that stands up to FCA and PRA scrutiny without creating unintended liability. Readers will learn how to allocate prescribed responsibilities cleanly, close overlap and gap risks, and produce a document that supports rather than undermines the SMF holder.

Regulatory submissionRegulatorsExecutive teams
4 min readRead guide →
Regulation & Regulatory Change

What Regulators Look For in a Submission: A Practical Guide

This guide sets out what regulators actually assess when they receive a submission from a regulated firm, from authorisation applications to skilled person responses and change-in-control filings. After reading, you will know how to prepare submissions that demonstrate genuine compliance, sound judgement, and credible governance.

Regulatory submissionRegulatorsRegulatory uncertainty
4 min readRead guide →
Regulation & Regulatory Change

How to Prepare a Regulatory Filing With Stakeholder Risk Assessment

A practical guide for senior leaders on integrating stakeholder risk assessment into a regulatory filing so it reads as evidence of genuine control, not compliance theatre. After reading, you will know how to sequence the work, what to include, and where filings typically fall short under supervisory review.

Regulatory submissionRegulatorsBoards
4 min readRead guide →
Regulation & Regulatory Change

Structuring a Section 178 Notification That Withstands PRA Group Structure Review

This guide sets out how to prepare a Change in Control notification that presents the acquirer's group with the clarity, completeness, and supervisory logic the PRA expects. After reading, you will know how to sequence disclosures, frame group complexity honestly, and engage the regulator in a way that supports timely approval on the merits.

Regulatory submissionAcquisitionRegulators
4 min readRead guide →
Boards, Governance & Defensibility

Structuring a PRA Senior Manager Attestation on Risk Framework Effectiveness

This guide sets out how to structure a Senior Manager attestation on the effectiveness of a firm's risk framework in a way that meets PRA supervisory expectations and stands up to later challenge. Readers will finish with a clear method for scoping, evidencing, qualifying, and signing an attestation that reflects the true state of the framework.

Regulatory submissionRegulatorsExecutive teams
4 min readRead guide →

Where a specific question needs an outside answer, quickly

Polar Insight's Expert Network connects leadership teams with practitioners who can speak to a precise regulatory, commercial, or stakeholder question before a decision is finalised.

Explore Expert Network