How to Prepare for an FCA Supervisory Visit: A Practical Guide

An FCA supervisory visit is not an audit and not a hearing. It is a structured conversation in which supervisors test whether your firm understands its risks, runs itself the way it says it does, and can be trusted to act on issues without being told. Preparation is about being able to demonstrate that, honestly and precisely, under questioning.

Key Executive Takeaways

• The FCA is assessing whether your governance, risk management, and culture work in practice, not whether your documents look tidy, so preparation must focus on evidence of real behaviour.
• Most firms damage their credibility by over-rehearsing, hiding known issues, or letting the wrong people answer, when supervisors expect candour, ownership, and specificity from accountable individuals.
• Treat the visit as one point in a continuous relationship: what you say, commit to, and follow through on will shape supervisory judgement for years.

Start with why the visit is happening

Read the FCA's scoping letter carefully and take it at face value. If they have asked about consumer duty outcomes, financial crime controls, or operational resilience, that is what they want to discuss. Do not assume hidden motives. Do map the questions back to your own risk register, board papers, and MI to identify where your internal view and the likely supervisory view might diverge. Those divergences are where the visit will get uncomfortable, and where honest preparation pays off.

Get the document pack right

Supervisors typically request governance papers, MI, policies, risk assessments, and evidence of remediation on prior issues. The common failure is volume over relevance. Send what was asked for, in the form it exists internally. Do not create bespoke summaries that differ from what the board actually saw. If a policy was updated recently, include both versions and be ready to explain why. If MI has gaps, flag them in a short covering note rather than letting supervisors find them.

Align the people who will be in the room

The SMF holders accountable for the areas under review must lead. Do not put a Head of Compliance in front of questions that belong to the CRO or the business line SMF. Supervisors read substitution as a governance signal.

Run structured preparation sessions, not rehearsals. The purpose is to ensure each accountable person can:

• Describe their area's key risks in their own words, with current numbers.
• Explain what has changed in the last twelve months and why.
• Name the two or three things that keep them up at night, and what is being done about them.
• Point to specific evidence, board minutes, MI, decisions, that supports what they are saying.

If someone cannot do this without a script, that is a real issue to address, not a presentation problem to paper over.

Be candid about known issues

The fastest way to lose supervisory trust is to be caught minimising a problem the FCA already knows about, or one that surfaces in your own documents. If you have an open remediation, a control weakness, or a recent incident, say so early, explain the root cause analysis, and describe the plan with dates and owners. Supervisors are trained to notice defensive language. Ownership, by contrast, is disarming and buys credibility for the harder conversations.

What good looks like on the day

Good firms are specific, numerate, and consistent across speakers. They distinguish between what they know, what they are still investigating, and what they have judged acceptable and why. They do not oversell. When they do not know something, they say so and commit to a follow-up with a date. Board and executive members demonstrate genuine oversight by referring to actual challenges they made, not generic descriptions of process.

Follow through

Within days of the visit, capture every commitment made and every question left open. Send a written follow-up to your supervisor confirming both. Track actions through your normal governance, not a side workstream, and report progress proactively. The visit ends when the last commitment is closed, not when the supervisors leave the building.

Your next decision

Before the visit, ask yourself one question: if a supervisor sat in on your next ExCo or board risk meeting unannounced, would what they saw match what you plan to tell them? If not, the preparation work is internal, not presentational.

Frequently Asked Questions

How far in advance should preparation start?

Four to six weeks is typical for a scheduled visit. Less than three weeks tends to produce rushed document packs and under-prepared SMFs. If you have material open issues, start earlier so remediation status is credible.

Should we use external advisers?

Advisers are useful for challenging your self-assessment, stress-testing SMF readiness, and reviewing document packs for consistency. They should not speak for you in the visit or write scripts. Supervisors want to hear from the people accountable.

What if a difficult question comes up we have not prepared for?

Answer what you know, acknowledge what you do not, and commit to follow up in writing with a specific date. Speculation and defensiveness both damage credibility more than a straightforward "we will come back to you on that."

How much should the board be involved?

The Chair and relevant NED committee chairs should expect to participate where governance and oversight are in scope. Their ability to describe specific challenges they have made to management is often a defining moment in supervisory assessment.

What happens after the visit?

Expect a follow-up letter summarising findings, sometimes with required actions or a request for a remediation plan. Respond promptly, in the tone and detail the letter invites, and treat it as the start of the next supervisory cycle.