How to Structure a Section 166 Skilled Person Review Response That Preserves Firm Credibility

A Section 166 notice is not a procedural inconvenience. It is a signal that the FCA or PRA has lost sufficient confidence in the firm's own assurance to commission an independent view at your expense. How you respond, from the first scoping conversation to the final remediation sign-off, will shape supervisory posture for years. The firms that come out of a s166 stronger are the ones that treat it as a genuine opportunity to establish facts and fix root causes, not as litigation to be managed.

Key Executive Takeaways

• Credibility is built in the scoping phase: engage substantively on terms of reference, methodology, and evidence boundaries before they are finalised.
• The firm's internal response structure matters as much as the Skilled Person's work: appoint a senior accountable owner, a dedicated secretariat, and a clear decision cadence.
• Remediation planning should run in parallel with the review, not after it, so that findings land alongside credible, resourced action.

Treat Scoping as the Most Important Phase

The terms of reference define everything that follows. Once agreed between the regulator and the Skilled Person, they are extremely hard to reshape. Use the pre-appointment window to engage seriously on scope boundaries, sampling approach, time period, and the definition of key terms. Push for specificity. A vague scope invites expansive interpretation later and makes it harder to demonstrate completion.

Be candid about what you already know. If internal audit or a prior review has identified issues within the proposed scope, say so. Attempting to let the Skilled Person 'discover' known issues reads as evasion when it emerges, and it always emerges.

Appoint the Right Internal Structure

Name a single senior accountable executive, usually a relevant SMF holder, who owns the firm's response end to end. Underneath them, establish:

• A secretariat function responsible for evidence requests, document control, and interview logistics.
• A technical response group of subject matter experts who review draft findings for factual accuracy.
• A steering group, chaired by the accountable executive, meeting weekly with the CRO, General Counsel, and relevant business head.
• Board or board committee oversight with a defined reporting cadence.

Most firms underestimate the volume of document production. A mid-sized s166 can generate thousands of requests. Without disciplined logging, you will lose track of what has been provided, create inconsistencies, and damage your credibility through administrative error alone.

Manage the Evidence Trail with Discipline

Every document provided should be logged, version-controlled, and traceable. When the Skilled Person asks the same question twice, your answers must match. Inconsistency, even innocent inconsistency, is read as either poor control or deliberate obfuscation.

Brief interviewees properly. They should understand the purpose of the review, know the scope, and be told to answer accurately and completely. Do not coach content. Do remind them that speculation and recollection should be distinguished from documented fact.

Engage Substantively with Draft Findings

The draft report is where many firms damage themselves. Two common failures: accepting findings passively to appear cooperative, or contesting them aggressively to appear defended. Neither works.

The right posture is forensic. Where a finding is factually inaccurate, correct it with evidence. Where the characterisation overstates or understates severity, provide context and ask for recalibration. Where the finding is correct, accept it clearly and move the conversation to remediation. Marking up a draft with hundreds of defensive comments signals a firm that cannot absorb criticism.

Run Remediation in Parallel

Start remediation planning the moment emerging themes are visible, not when the final report lands. By the time the regulator reads the findings, you should be able to present:

• A root cause analysis distinguishing control failures from design failures from capability gaps.
• A sequenced remediation plan with owners, milestones, and resource commitments.
• An assurance approach, typically combining internal audit and, where appropriate, independent validation.
• A board-level governance mechanism for tracking delivery.

Firms that treat remediation as a post-report exercise lose months and give supervisors the impression that the issues have not been truly absorbed.

The Decision Point

Before the Skilled Person is appointed, your executive team should agree a single question: are we approaching this review to establish the truth and fix what is broken, or to defend a position? Only the first answer preserves credibility. Make that decision explicitly, document it, and let it govern every subsequent choice.

Frequently Asked Questions

Should we use external counsel to coordinate the response?

For most s166 reviews, yes, particularly where findings could lead to enforcement. Counsel helps with privilege management, interview preparation, and consistency of communication. They should support the internal response structure, not replace it. The accountable SMF holder must remain visibly in charge.

How much should we share with the board during the review?

More than feels comfortable. The board or relevant committee should receive regular updates on scope, emerging themes, evidence provided, and remediation planning. Boards that are surprised by s166 findings have a governance problem that supervisors will notice.

Can we challenge the choice of Skilled Person?

You can raise substantive concerns about independence or capability during the appointment process. Challenging on tactical grounds, because a particular firm is known to be rigorous, damages credibility immediately and rarely succeeds.

What signals do supervisors look for during a s166?

Candour, pace, and the quality of root cause thinking. Supervisors are watching whether the firm genuinely understands why issues arose and whether leadership is treating the review as an opportunity to improve or as a problem to contain.

When should remediation be considered complete?

When the controls are operating effectively over a sustained period, validated independently, and the board has received evidence of sustained outcomes, not just implemented actions. Declaring victory too early is one of the most common and most damaging mistakes.