How to Structure an SMCR Handover Certificate That Protects Both Parties

A handover certificate is not a formality. It is the document a regulator will read first when something goes wrong on the successor's watch and the question becomes: who knew what, and when. Done well, it protects the outgoing SMF from being held accountable for issues they flagged, and gives the incoming SMF a fair starting position against the Duty of Responsibility. Done poorly, it does neither.

Start From the Statement of Responsibilities, Not a Template

The handover should map directly to each prescribed responsibility and each responsibility allocated in the SoR. If the outgoing SMF held SMF prescribed responsibilities for financial crime, client assets, or conduct rules training, each should have its own section. A generic narrative structure almost always omits something material. Start from the SoR line by line and force a disclosure against each item.

SG 2.4 of the FCA's SYSC guidance sets the baseline: all information that the successor could reasonably expect to do their job. The practical test is harder: would a Skilled Person, reading this in eighteen months, conclude the outgoing SMF gave a complete and candid picture?

What to Include, With Evidence

For each responsibility, cover:

• Current state: controls in place, their maturity, known weaknesses, and recent assurance findings (internal audit, compliance monitoring, second line reviews). Reference report titles and dates.
• Open issues and overdue actions: each with owner, original deadline, revised deadline, and the reason for slippage. Do not sanitise. If a remediation is late because resourcing was declined, say so and cite the forum where it was declined.
• Live regulatory interactions: s.165 requests, Dear CEO responses in flight, any mandatory notifications under Principle 11 or SUP 15 made or considered. Attach the correspondence.
• Decisions pending: items on the next three committee agendas requiring the SMF's input, with the papers or summaries.
• Known near-misses and incidents: including those not formally reportable but material to judgement.
• Key relationships: supervisors, auditors, senior stakeholders, and any sensitivities in those relationships.
• Judgement calls made: where the outgoing SMF exercised discretion on a borderline matter, the reasoning, and the record.

Attach source documents. A certificate that references "the Q2 compliance report" without the report is weaker than one that includes it.

What Most People Get Wrong

Three recurring failures. First, the certificate reads like a marketing document for the function. Strengths are detailed, weaknesses are generalised. This helps no one and actively harms the outgoing SMF if the weakness later becomes an enforcement matter.

Second, the incoming SMF signs receipt without recording their response. Good practice is a written acknowledgement that itemises each issue received and either accepts it, requests further information, or flags disagreement. This creates the paper trail that protects both parties.

Third, firms treat the handover as a two-party document. It should be reviewed by the Chair or SMF1, logged with the SMCR function, and retained alongside the SoRs and Management Responsibilities Map. If HR owns it alone, it will not be found when needed.

Sequencing and Governance

Draft the certificate at least four weeks before the effective date. Share it with the incoming SMF for questions before sign-off, not after. Have the Chair or line manager review it for completeness against the SoR. Where the outgoing SMF is leaving under contested circumstances, involve independent legal counsel on the drafting: the certificate is both a regulatory document and potentially evidence in later proceedings.

The Next Decision

Before the next scheduled SMF transition at your firm, ask one question: if the FCA requested every handover certificate issued in the last three years, would they show a consistent standard, or would they reveal that your firm treats handovers as an HR exit task? If the latter, fix the template and the governance before the next departure, not after.

Frequently Asked Questions

Who should sign the certificate?

Both the outgoing and incoming SMFs, with countersignature by the Chair, SMF1, or relevant line manager. The SMCR or company secretariat function should log it.

How long should a handover certificate be?

Length follows the role. An SMF16 or SMF17 handover in a complex firm will run to tens of pages with appendices. A narrow controlled function handover may be shorter. Brevity is not a virtue if material issues are omitted.

What if the outgoing SMF refuses to disclose something they consider immaterial?

Escalate to the Chair. The test is not the outgoing SMF's view of materiality but what the successor could reasonably expect. Disputes should be resolved before sign-off, with the reasoning recorded.

Does the certificate need to go to the regulator?

Not proactively, but it is disclosable on request and will be sought in any Duty of Responsibility investigation. Draft it on that assumption.

How does this interact with the 12-week rule for temporary cover?

A temporary cover handover should be proportionate but still written. The incoming interim should receive the same categories of information, even if the detail is lighter, and a full certificate should follow if the appointment is made permanent.