· 公众号:业务连续性+

英国金融业运营韧性资料中文简译:审慎监管局规则手册运营韧性部分

写在前面 :越来越多的人们开始关注运营韧性。事实上,虽然该领域还在快速的发展中,但已经凝聚了一些共识。金融行业是最为关注运营韧性的行业之一,近几年来,英美等国的金融监管机构以及巴塞尔银行监管委员陆续发布/修订了运营韧性(Operational Resilience)和业务连续性管理方面的正式文件。为让更多的专业人员者和爱好者了解国外运营韧性领域的进展,学习并实践运营韧性的良好实践,在2021年中期,我组织了一个公益翻译小组,对运营韧性相关资料进行翻译,并于去年发布了以下资料: 《运营韧性原则》中文简译 (2021年11月23日) 《操作风险稳健管理原则修订》中文简译 (2021年11月29日)

之后,我再次组织了一个公益翻译小组,对英国金融监管机构的运营韧性资料进行翻译,今年春节前后,翻译小组成员陆续将翻译文稿发送给我,经历了种种耽搁和拖延之后,我近日终于将这些资料审校完成,接下来会陆续在公众号发布出来。

以下是参与本系列资料的公益翻译小组成员 (排名不分前后,按姓氏拼音排序): 安晓冬(上海, anton_6@163.com ) 陈阳(中国银行欧洲信息中心, chenyang@bankofchina.com ) 马骏(大连埃森哲, patrick.ma2018@outlook.com ) 彭水娟(江阴长电先进, shuijuan2006@126.com ) 孙宁莉(韧安咨询, resil-safe@outlook.com ) 王舵(大连,BCM咨询Freelancer, prepkids@163.com ) 吴小林(苏州银行, 66886629@163.com ) 巫文湘(开泰银行(中国)有限公司, michael_woo_sz@hotmail.com ) 徐文静(DNV, wen.jing.xu@dnv.com ) 翟红波(北京, 25354646@qq.com ) 周可政(上海, wikikivv@gmail.com ) 王曙(新常安科技, kevinwang@vip.sina.com )

感谢公益翻译小组的各位专业人员在疫情期间抽出个人休息时间进行翻译工作。以下译文由我负责最终统一审校定稿,因为对英国金融业了解深度不够,如译文中有任何不准确或理解错误的地方,都是由于我的原因造成,与诸位翻译人员无关。如对译文有意见或修改建议,请给我留言。

王曙(kevinwang) 2022.11.25


下文是英国审慎监管局(PRA)运营韧性政策声明附件1 — PRA规则手册运营韧性部分,由英国审慎监管局于2021年3月29日发布,原文见: https://www.bankofengland.co.uk/-/media/boe/files/prudential-regulation/policy-statement/2021/march/ps621app1.pdf


PRA规划手册:CRR机构,Solvency II机构:运营韧性文书2021 PRA RULEBOOK: CRR FIRMS,SOLVENCY II FIRMS: OPERATIONAL RESILIENCE INSTRUMENT 2021

权力援用 A. 审慎监管局(“PRA”)在行使《2000年金融服务和市场法》(“法案”)中的以下权力和相关规定时制定本文书: (1) 第137G节(PRA一般规则);和 (2) 第137T节(一般补充权力) B. 上述规则制定权力是为法案第138G(2)节(规则制定文书)的目的而规定的。 Powers exercised A. The Prudential Regulation Authority (“PRA”) makes this instrument in the exercise of the following powers and related provisions in the Financial Services and Markets Act 2000 (“the Act”): (1) section 137G (The PRA’s general rules); and (2) section 137T (General supplementary powers) B. The rule-making powers referred to above are specified for the purpose of section 138G(2) (Rulemaking instrument) of the Act.

先决条件 C. 根据法案第138J节(PRA征求意见),PRA征询了FCA。在征求意见后,PRA局公布了拟议规则草案,并考虑了所作的陈述。 Pre-conditions to making C. In accordance with section 138J of the Act (Consultation by the PRA), the PRA consulted the Financial Conduct Authority. After consulting, the PRA published a draft of proposed rules and had regard to representations made.

PRA规划手册:CRR机构,偿付能力II机构:运营韧性文书2021 D. PRA制定了本文书附件中的规则。 PRA Rulebook: CRR Firms, Solvency II Firms: Operational Resilience Instrument 2021 D. The PRA makes the rules in Annexes to this instrument. 部分Part 附件Annex 运营韧性 – CRR机构Operational Resilience – CRR Firms A 运营韧性 – 偿付能力II机构Operational Resilience – Solvency II Firms B 集团监管Group Supervision C

生效时间 E.本文书于2022年3月31日生效。 Commencement E. This instrument comes into force on 31 March 2022.

引用 F. 本文书可被引用为《PRA规则手册:CRR机构、偿付能力II机构:运营韧性文书2021》。 Citation F. This instrument may be cited as the PRA Rulebook: CRR Firms, Solvency II Firms: Operational Resilience Instrument 2021.

审慎监管委员会 2021 3月24日 By order of the Prudential Regulation Committee 24 March 2021


附件A 本附件中,文本是全新的,没有下划线。 运营韧性 – CRR机构 章节内容

  1. 适用和定义
  2. 运营韧性要求
  3. 策略、过程和系统
  4. 映射
  5. 情景测试
  6. 自评估
  7. 治理
  8. 集团安排 Annex A In this Annex, the text is all new and is not underlined. Part OPERATIONAL RESILIENCE – CRR FIRMS Chapter content
  9. APPLICATION AND DEFINITIONS
  10. OPERATIONAL RESILIENCE REQUIREMENTS
  11. STRATEGIES, PROCESSES AND SYSTEMS
  12. MAPPING
  13. SCENARIO TESTING
  14. SELF-ASSESSMENT
  15. GOVERNANCE
  16. GROUP ARRANGEMENTS

1 适用和定义 1.1 除非另有说明,本部分适用于所有CRR机构。 1.2 在本部分中,以下定义应适用: 资本缓冲条例 指《2014年资本要求(资本缓冲和宏观审慎措施)条例》(SI 2014/894)。 集团外部最终用户 指根据 机构英国母公司 的 合并情况 ,接受服务且不是 机构合并集团 成员的人员。 影响容忍度 指对 重要业务服务 或 重要集团业务服务 的最大可容忍扰断水平,由时间长度以及任何其它相关指标度量。 重要业务服务 指 机构 或代表 机构 的另一人向其他人提供的服务,一旦扰断,可能会对以下方面构成风险: (1) 如果 机构 是 其它系统重要性机构 ,指 英国 金融体系的稳定性;或 (2) 机构 的安全和稳健。 重要集团业务服务 指 机构合并集团 成员( 机构 除外)根据该 合并集团英国母公司 的 合并情况 向集团外部最终用户提供的服务,一旦扰断,可能会对以下方面构成风险: (1) 如果 机构 是 其它系统重要性机构 ,指 英国 金融体系的稳定;或 (2) 机构 的安全和稳健。 其它系统重要性机构 指 PRA 根据《 资本缓冲条例 》第5部分确定的 法人 或 集团 。 1.3 除非另有定义,本部分和 CRR 中使用的任何斜体字与 CRR 中的含义相同。 1 APPLICATION AND DEFINITIONS 1.1 Unless otherwise stated, this Part applies to every firm that is a CRR firm . 1.2 In this Part, the following definitions shall apply: Capital Buffers Regulations means the Capital Requirements (Capital Buffers and Macro-prudential Measures)Regulations 2014 (SI 2014/894). external group end user means a person who receives services and who is not a member of the firm’s consolidation group on the basis of the consolidated situation of the firm’s UK parent undertaking . impact tolerance means the maximum tolerable level of disruption to an important business service or an important group business service as measured by a length of time in addition to any other relevant metrics. important business service means a service provided by a firm , or by another person on behalf of the firm , to another person which, if disrupted, could pose a risk to: (1) where the firm is an O-SII , the stability of the UK financial system; or (2) the firm’s safety and soundness. important group business service means a service provided by a member of the firm’s consolidation group (other than the firm ) on the basis of the consolidated situation of the UK parent undertaking of that consolidation group , to an external group end user which, if disrupted, could pose a risk to: (1) where the firm is an O-SII , the stability of the UK financial system; or (2) the firm’s safety and soundness. O-SII means a person or group identified by the PRA in accordance with Part 5 of the Capital Buffers Regulations . 1.3 Unless otherwise defined, any italicised expression used in this Part and in the CRR has the same meaning as in the CRR .

2 运营韧性要求 2.1 机构 必须确定其 重要业务服务 ,如果8.2适用,必须确定其 重要集团业务服务 。 2.2 机构 必须为以下各项设定 影响容忍度 : (1) 其 重要业务服务 ;和 (2) 如果8.2适用,其 重要集团业务服务 。 2.3 为每个 重要业务服务 或 重要集团业务服务 设定的 影响容忍度 ,必须指明 重要业务服务 或 重要集团业务服务 的扰断将对以下情况构成风险的第一个时间点: (1) 如果 机构 是 其它系统重要性机构 ,指 英国 金融体系的稳定;或 (2) 机构的安全和稳健。 2.4 为每个 重要业务服务 或 重要集团业务服务 设定的 影响容忍度 ,除任何其他相关指标外,必须指明该 重要业务服务 或 重要集团业务服务 所能容忍的扰断时间长度或时间点。 2.5 机构 必须确保在其运营发生严重但合理的扰断时,每个 重要业务服务 能够保持在其 影响容忍度 范围内。 2.6 机构 必须在规则生效后的合理时间内符合2.5,无论如何不迟于2025年3月31日。 2 OPERATIONAL RESILIENCE REQUIREMENTS 2.1 A firm must identify its important business services and, where 8.2 applies, its important group business services . 2.2 A firm must set an impact tolerance for each of: (1) its important business services ; and (2) where 8.2 applies, its important group business services . 2.3 The impact tolerance set for each important business service or important group business service must specify the first point at which a disruption to the important business service or important group business service would pose a risk to: (1) where the firm is an O-SII , the stability of the UK financial system; or (2) the firm’s safety and soundness. 2.4 The impact tolerance set for each important business service or important group business service must specify the length of or point in time, in addition to any other relevant metrics, for which a disruption to that important business service or important group business service can be tolerated. 2.5 A firm must ensure it can remain within its impact tolerance for each important business service in the event of a severe but plausible disruption to its operations. 2.6 A firm must comply with 2.5 within a reasonable time of the rule coming into effect and in any event by no later than 31 March 2025.

3 策略、流程和系统 3.1 机构 必须拥有稳健、有效和全面的策略、流程和系统,使其能够充分地: (1) 确定其重要业务服务(以及,如8.2适用,重要集团业务服务); (2) 为每个重要业务服务(以及,如8.2适用,每个重要集团业务服务)设定影响容忍度;和 (3) 识别并应对其履行2.5项下义务的能力所面临的任何风险。 3.2 3.1要求的策略、流程和系统必须与 机构 活动的性质、规模和复杂程度相称。 3 STRATEGIES, PROCESSES AND SYSTEMS 3.1 A firm must have in place sound, effective and comprehensive strategies, processes and systems that enable it adequately to: (1) identify its important business services and, where 8.2 applies, important group business services; (2) set an impact tolerance for each important business service and, where 8.2 applies, each important group business service; and (3) identify and address any risks to its ability to comply with the obligation under 2.5. 3.2 The strategies, processes and systems required by 3.1 must be proportionate to the nature, scale and complexity of the firm’s activities.

4 映射 4.1 作为3.1项下义务的一部分, 机构 必须识别并记录交付其每个 重要业务服务 所需的人员、流程、技术、设施和信息。 4 MAPPING 4.1 As part of its obligation under 3.1, a firm must identify and document the necessary people, processes, technology, facilities and information required to deliver each of its important business services .

5 情景测试 5.1 作为3.1项下义务的一部分, 机构 必须定期进行情景测试,以测试在其运营发生严重但合理的扰断时,对其每个 重要业务服务 保持在其影响容忍度范围内的能力。 5.2 在进行5.1要求的情景测试时, 机构 必须确定与其业务和风险状况相关的不同性质、严重程度和持续时间的适当范围的不利情况,并考虑在这些情况下交付 机构重要业务服务 的风险。 5.3 5.1要求的情景测试必须与 机构 活动的性质、规模和复杂程度相称。 5 SCENARIO TESTING 5.1 As part of its obligation under 3.1, a firm must carry out regular scenario testing of its ability to remain within its impact tolerance for each of its important business services in the event of a severe but plausible disruption of its operations. 5.2 In carrying out the scenario testing required by 5.1, a firm must identify an appropriate range of adverse circumstances of varying nature, severity and duration relevant to its business and risk profile and consider the risks to delivery of the firm’s important business services in those circumstances. 5.3 The scenario testing required by 5.1 must be proportionate to the nature, scale and complexity of the firm’s activities.

6 自评估 6.1 机构 必须准备并定期更新其符合本部分的书面自评估。 6.2 机构 书面自评估的内容和详细程度必须与 机构 活动的性质、规模和复杂程度相称,并在适用情况下与 机构 所属的合并集团的活动相称。 6.3 机构 必须保存并能够应要求向 PRA 提供其书面自评估的最新版本,以及过去三年内产生的所有版本。 6 SELF-ASSESSMENT 6.1 A firm must prepare and regularly update a written self-assessment of its compliance with this Part. 6.2 The content and level of detail of a firm’s written self-assessment must be proportionate to the nature, scale and complexity of the firm’s activities, and where applicable to the activities of the consolidation group of which the firm is a member. 6.3 A firm must maintain, and be able to provide to the PRA on request, a current version of its written self-assessment, together with all versions produced during the preceding three years.

7 治理 7.1 机构 必须确保其 管理团队 批准机构根据2.1和8.2确定的 重要业务服务 和 重要集团业务服务 。 7.2 机构 必须确保其 管理团队 批准机构根据2.2和8.2设定的 影响容忍度 。 7.3 机构 必须确保其 管理团队 批准并定期审查6.1要求的自评估。 7 GOVERNANCE 7.1 A firm must ensure that its management body approves the important business services and important group business services identified by the firm in compliance with 2.1 and 8.2. 7.2 A firm must ensure that its management body approves the impact tolerances set by the firm in compliance with 2.2 and 8.2. 7.3 A firm must ensure that its management body approves and regularly reviews the self-assessment required by 6.1.

8 集团安排 8.1 如果 机构 是 集团 的成员, 机构 必须确保其对 集团 其他地方产生的可能影响机构履行2.5项下义务的能力的任何额外风险负责。 8.2 如果 机构 是 合并集团 的成员,根据 合并集团的英国母公司 的 合并情况 , 机构 还必须符合2.1和2.2关于其 重要集团业务服务 的规定。 8.3 除第3.1(3)外,如果 机构 是 合并集团 的成员,根据 合并集团的英国母公司 的 合并情况 , 机构 必须确保其所属 合并集团 的策略、流程和系统符合第3条规定的义务。 8.4 如果 机构 是 合并集团 的成员,根据 合并集团的英国母公司 的 合并情况 , 机构 必须确定其 合并集团 层面的策略、流程和系统使机构能够评估提供每个 重要集团业务服务 的 合并集团 成员在其运营发生严重但合理的中断时,是否能够保持在影响容忍度范围内。 8.5 本章要求的策略、流程和系统必须与 合并集团 活动的性质、规模和复杂程度相称。 8 GROUP ARRANGEMENTS 8.1 Where a firm is a member of a group , the firm must ensure it accounts for any additional risks arising elsewhere in the group that may affect the firm’s ability to comply with the obligation under 2.5. 8.2 Where a firm is a member of a consolidation group , the firm must also comply with 2.1 and 2.2 in relation to its important group business services , on the basis of the consolidated situation of the UK parent undertaking of the consolidation group . 8.3 With the exception of 3.1(3), where a firm is a member of a consolidation group , the firm must ensure that the strategies, processes and systems at the level of the consolidation group of which it is a member comply with the obligations set out in 3 on the basis of the consolidated situation of the UK parent undertaking of the consolidation group . 8.4 Where a firm is a member of a consolidation group , the firm must ensure that the strategies, processes and systems at the level of its consolidation group enable the firm to assess on the basis of the consolidated situation of the UK parent undertaking of the consolidation group whether the member of that consolidation group providing each important group business service could remain within the impact tolerance in the event of a severe but plausible disruption to its operations. 8.5 The strategies, processes and systems required by this Chapter must be proportionate to the nature, scale and complexity of the consolidation group’s activities.


附件B 本附件中,文本是全新的,没有下划线。 运营韧性 – 偿付能力II机构 章节内容

  1. 适用和定义
  2. 运营韧性要求
  3. 策略、过程和系统
  4. 映射
  5. 情景测试
  6. 自评估
  7. 治理
  8. 集团安排
  9. 劳合社 Annex B In this Annex, the text is all new and is not underlined. Part OPERATIONAL RESILIENCE – SOLVENCY II FIRMS Chapter content
  10. APPLICATION AND DEFINITIONS
  11. OPERATIONAL RESILIENCE REQUIREMENTS
  12. STRATEGIES, PROCESSES AND SYSTEMS
  13. MAPPING
  14. SCENARIO TESTING
  15. SELF-ASSESSMENT
  16. GOVERNANCE
  17. GROUP ARRANGEMENTS
  18. LLOYDS

1 适用和定义 1.1 除非另有说明,本部分适用于: (1) 英国偿付能力II机构 ; (2) 根据《保险一般应用》第3条、 社团 ,第9条修改;和 (3) 根据《保险一般应用》第3条, 管理代理公司 ,第9条修改。 1.2 在本部分中,以下定义应适用: 集团外部最终用户 指接受服务,且不属于 机构 所属 集团 的人员。 影响容忍度 指对 重要业务服务 或 重要集团业务服务 的最大可容忍扰断水平,由时间长度以及任何其它相关指标度量。 重要业务服务 指 机构 或代表 机构 的另一人向其他人提供的服务,一旦扰断,可能会对以下方面构成风险: (1) 如果 机构 是 相关偿付能力II机构 ,指 英国 金融体系的稳定; (2) 机构 的安全和稳健;或 (3) 为 机构 的投 保人 或可能成为 投保人 的人员提供适当程度的保护。 重要集团业务服务 指 集团 成员( 机构 除外)向 集团外部最终用户 提供的服务,一旦中断,可能会对以下方面构成风险: (1) 如果 相关偿付能力II机构 是 集团 成员,指 英国 金融体系的稳定; (2) 机构 的安全和稳健;或 (3) 为 机构 的投 保人 或可能成为 投保人 的人员提供适当程度的保护。 相关偿付能力II机构 指满足以下任一条件的 机构 : (1) 机构 的年度毛保费收入超过150亿英镑;或 (2) 机构的 技术准备金 ,从 再保险合同 和 英国ISPVs 中收回的总额之和,如技术准备金2.1至2.3所述,超过750亿英镑, 根据三年滚动期间的平均年度分摊额确定,参考 机构 的 会计基准日期计算 ;如果该 机构 成立不足三年,则按该 机构 成立期间的年平均金额(参照该 机构 的 会计基准日计算 )进行分摊。 1 APPLICATION AND DEFINITIONS 1.1 Unless otherwise stated, this Part applies to: (1) a UK Solvency II firm ; (2) in accordance with Insurance General Application 3, the Society , as modified by 9; and (3) in accordance with Insurance General Application 3, managing agents , as modified by 9. 1.2 In this Part, the following definitions shall apply: external group end user means a person who receives services and who is outside of the group of which the firm is a member. impact tolerance means the maximum tolerable level of disruption to an important business service or an important group business service as measured by a length of time in addition to any other relevant metrics. important business service means a service provided by a firm , or by another person on behalf of the firm , to another person which, if disrupted, could pose a risk to: (1) where the firm is a relevant Solvency II firm , the stability of the UK financial system; (2) the firm’s safety and soundness; or (3) an appropriate degree of protection for those who are or may become the firm’s policyholders . important group business service means a service provided by a member of a group (other than the firm ) to an external group end user which, if disrupted, could pose a risk to: (1) where a relevant Solvency II firm is a member of the group , the stability of the UK financial system; (2) the firm’s safety and soundness; or (3) an appropriate degree of protection for those who are or may become the firm’s policyholders . relevant Solvency II firm means a firm which fulfils any of the following conditions: (1) the firm’s annual gross written premium income exceeds £15 billion; or (2) the total of the firm’s technical provisions, gross of the amounts recoverable from reinsurance contracts and UK ISPVs , as referred to in Technical Provisions 2.1 to 2.3, exceeds £75 billion, determined on the basis of the average annual amount assessed across a rolling period of three years, calculated by reference to the firm’s accounting reference date ; and where the firm has been in existence for less than three years, the assessment will be made on the basis of the annual average amount for the period during which the firm has existed (calculated by reference to the firm’s accounting reference date )

2 运营韧性要求 2.1 机构 必须确定其 重要业务服务 ,如果集团监管22.2适用,必须确定其 重要集团业务服务 。 2.2 机构 必须为以下各项设定 影响容忍度 : (1) 其 重要业务服务 ;和 (2) 如果集团监管22.2适用,其 重要集团业务服务 。 2.3 为每个 重要业务服务 或重 要集团业务服务 设定的 影响容忍度 ,必须指明 重要业务服务 或 重要集团业务服务 的扰断将对以下情况构成风险的第一个时间点: (1) 如果 机构 是 相关偿付能力II机构 ,指 英国 金融体系的稳定; (2) 机构 的安全和稳健;或 (3) 为 机构 的 投保人 或可能成为 投保人 的人员提供适当程度的保护。 2.4 为每个 重要业务服务 或 重要集团业务服务 设定的影响容忍度,除任何其它相关指标外,必须指明该 重要业务服务 或者 重要集团业务服务 所能容忍的扰断时间长度或时间点。 2.5 机构 必须确保在其运营发生严重但合理的扰断时,每个 重要业务服务 能够保持在其影响容忍度范围内。 2.6 机构 必须在规则生效后的合理时间内遵守2.5,无论如何不迟于2025年3月31日。 2 OPERATIONAL RESILIENCE REQUIREMENTS 2.1 A firm must identify its important business services and, where Group Supervision 22.2 applies, its important group business services . 2.2 A firm must set an impact tolerance for each of: (1) its important business services ; and (2) (where Group Supervision 22.2 applies) its important group business services . 2.3 The impact tolerance set for each important business service or important group business service must specify the first point at which a disruption to the important business service or important group business service would pose a risk to: (1) where the firm is a relevant Solvency II firm , the stability of the UK financial system; (2) the firm’s safety and soundness; or (3) an appropriate degree of protection for those who are or may become the firm’s policyholders . 2.4 The impact tolerance set for each important business service or important group business services must specify the length of or point in time, in addition to any other relevant metrics, for which a disruption to that important business service or important group business service can be tolerated. 2.5 A firm must ensure it can remain within its impact tolerance for each important business service in the event of a severe but plausible disruption to its operations. 2.6 A firm must comply with 2.5 within a reasonable time of the rule coming into effect and in any event by no later than 31 March 2025.

3 策略、流程和系统 3.1 机构 必须有稳健、有效和全面的战略、流程和系统,使其能够充分地: (1) 确定其重要业务服务(以及,如果集团监管22.2适用,重要集团业务服务); (2) 为每个重要业务服务(以及,如果集团监管22.2适用,重要集团业务服务)设定影响容忍度;和 (3) 识别并应对其履行2.5项下义务的能力所面临的任何风险。 3.2 3.1要求的策略、流程和系统必须与 机构 活动的性质、规模和复杂程度相称。 3 STRATEGIES, PROCESSES AND SYSTEMS 3.1 A firm must have in place sound, effective and comprehensive strategies, processes and systems that enable it adequately to: (1) identify its important business services and, where Group Supervision 22.2 applies, its important group business services; (2) set an impact tolerance for each important business service and, where Group Supervision 22.2 applies, each important group business service; and (3) identify and address any risks to its ability to comply with the obligation in 2.5. 3.2 The strategies, processes and systems required by 3.1 must be proportionate to the nature, scale and complexity of the firm’s activities.

4 映射 4.1 作为3.1项下义务的一部分, 机构 必须识别并记录交付其每个 重要业务服务 所需的人员、流程、技术、设施和信息。 4 MAPPING 4.1 As part of its obligation under 3.1, a firm must identify and document the necessary people, processes, technology, facilities and information required to deliver each of its important business services .

5 情景测试 5.1 作为3.1项下义务的一部分, 机构 必须定期进行情景测试,以测试在其运营发生严重但合理保信的扰断时,其 每个重要业务服务 保持在其影响容忍度范围内的能力。 5.2 在进行5.1要求的情景测试时, 机构 必须确定与其业务和风险状况相关的不同性质、严重程度和持续时间的适当范围的不利情况,并考虑在这些情况下交付机构 重要业务服务 的风险。 5.3 5.1要求的情景测试必须与 机构 活动的性质、规模和复杂程度相称。 5 SCENARIO TESTING 5.1 As part of its obligation under 3.1, a firm must carry out regular scenario testing of its ability to remain within its impact tolerance for each of its important business services in the event of a severe but plausible disruption of its operations. 5.2 In carrying out the scenario testing required by 5.1, a firm must identify an appropriate range of adverse circumstances of varying nature, severity and duration relevant to its business and risk profile and consider the risks to delivery of the firm’s important business services in those circumstances. 5.3 The scenario testing required by 5.1 must be proportionate to the nature, scale and complexity of the firm’s activities.

6 自评估 6.1 机构 必须准备并定期更新其符合本部分和集团监管22的书面自评估。 6.2 机构 书面自评估的内容和详细程度必须与 机构 活动的性质、规模和复杂程度相称,并在适用情况下与机构所属的合并集团的活动相称。 6.3 机构 必须保存并能够应要求向 PRA 提供其书面自评估的最新版本,以及过去三年内产生的所有版本。 6 SELF-ASSESSMENT 6.1 A firm must prepare and regularly update a written self-assessment of its compliance with this Part and Group Supervision 22. 6.2 The content and level of detail of a firm’s written self-assessment must be proportionate to the nature, scale and complexity of the firm’s activities and, where applicable, to the activities of the group of which the firm is a member. 6.3 A firm must maintain, and be able to provide to the PRA on request, a current version of its written self-assessment, together with all versions produced during the preceding three years.

7 治理 7.1 机构 必须确保其 管理团队 批准机构根据2.1和集团监管22.3确定的 重要业务服务 和 重要集团业务服务 。 7.2 机构 必须确保其 管理团队 批准机构根据2.2和集团监管22.3设定的 影响容忍度 。 7.3 机构 必须确保其 管理团队 批准并定期审查6.1要求的自评估。 7 GOVERNANCE 7.1 A firm must ensure that its management body approves the important business services and important group business services identified by the firm in compliance with 2.1 and Group Supervision 22.3. 7.2 A firm must ensure that its management body approves the impact tolerances set by the firm in compliance with 2.2 and Group Supervision 22.3. 7.3 A firm must ensure that its management body approves and regularly reviews the self-assessment required by 6.1.

8 集团安排 8.1 如果 机构 是 集团 的成员, 机构 必须确保其对集团其他地方产生的可能影响 机构 履行2.5项下义务的能力的任何额外风险负责。 8 GROUP ARRANGMENTS 8.1 Where a firm is a member of a group, the firm must ensure it accounts for any additional risks arising elsewhere in the group that may affect the firm’s ability to comply with 2.5.

9 劳合社 9.1 本部分分别适用于 社团 和 管理代理公司 。 9 LLOYDS 9.1 This Part applies to the Society and managing agents separately


附件C 对集团监管部分的修订 本附件中,新增文本均下划线。

集团监管

章节内容 … 22. 集团运营韧性 Annex C Amendments to the Group Supervision Part In this Annex new text is underlined.

Part GROUP SUPERVISION

Chapter content … 22. GROUP OPERATIONAL RESILIENCE

1 适用和定义 … 1.2 在本部分中,以下定义应适用: … 集团外部最终用户 指接受服务,且在 机构 所属 集团 以外的人员。 … 影响容忍度 指对 重要业务服务 或 重要集团业务服务 的最大可容忍扰断水平,由时间长度以及任何其它相关指标度量。 重要业务服务 指 机构 或代表 机构 的 另一人 向 其他人 提供的服务,一旦扰断,可能会对以下方面构成风险: (1) 如果 机构 是 相关偿付能力II机构 ,指 英国 金融体系的稳定;或 (2) 机构 的安全和稳健。 重要集团业务服务 指 集团 成员( 机构 除外)向 集团外部最终用户 提供的服务,一旦扰断,可能会对以下方面构成风险: (1) 如果 相关偿付能力II机构 是 集团 成员,则指 英国 金融体系的稳定; (2) 机构 的安全和稳健;或 (3) 为 机构 的 投保人 或可能成为投 保人 的人员提供适当程度的保护。 … 相关偿付能力II机构 指满足以下任一条件的 机构 : (1) 机构 的年度毛保费收入超过150亿英镑;或 (2) 机构 的 技术准备金 ,从 再保险合同 和 英国ISPVs 中可收回的总额之和,如技术准备金2.1至2.3所述,超过750亿英镑, 根据三年滚动期内的平均年度分摊额确定,参考 机构 的 会计基准日期 计算;如果该 机构 成立不足三年,则按该 机构 成立期间的年平均金额(参照该 机构的会计基准日计算 )进行分摊。 1 APPLICATION AND DEFINITIONS … 1.2 In this Part, the following definitions shall apply: … external group end user means a person who receives services and who is outside of the group of which the firm is a member. … impact tolerance means the maximum tolerable level of disruption to an important business service or an important group business service as measured by a length of time in addition to any other relevant metrics. important business service means a service provided by a firm , or by another person on behalf of the firm , to another person which, if disrupted, could pose a risk to: (1) where the firm is a relevant Solvency II firm , the stability of the UK financial system; or (2) the firm’s safety and soundness. important group business service means a service provided by a member of a group (other than the firm ) to an external group end user which, if disrupted, could pose a risk to: (1) where a relevant Solvency II firm is a member of the group , the stability of the UK financial system; (2) the firm’s safety and soundness; or (3) an appropriate degree of protection for those who are or may become the firm’s policyholders . … relevant Solvency II firm means a firm which fulfils any of the following conditions: (1) the firm’s annual gross written premium income exceeds £15 billion; or (2) the total of the firm’s technical provisions , gross of the amounts recoverable from reinsurance contracts and UK ISPVs , as referred to in Technical Provisions 2.1 to 2.3, exceeds £75 billion, determined on the basis of the average annual amount assessed across a rolling period of three years, assessed by reference to the firm’s accounting reference date ; and where the firm has been in existence for less than three years, the assessment will be made on the basis of the annual average amount for the period during which the firm has existed (calculated by reference to the firm’s accounting reference date ). …

22 集团运营韧性 22.1 规则22.2至22.5适用于任何 英国偿付能力II机构 ,如果该机构是 PRA 作为集团监管机构的 集团 成员。 22.2 如果 机构 是2.1(1)、2.1(2)或符合22.5、2.1(3)情况下所涵盖的 集团 的成员,该 机构 还必须就其 重要集团业务 服务符合运营韧性-偿付能力II机构2.1和2.2。 22.3 如果 机构 是2.1(1)、2.1(2)或符合22.5、2.1(3)情况下所涵盖的 集团 的成员,除运营韧性–偿付能力II机构3.1(3)以外,该 机构 必须确保其所属 集团 的策略、流程和系统符合运营韧性–偿付能力II机构3中规定的义务。 22.4 如果 机构 是2.1(1)、2.1(2)或符合22.5、2.1(3)情况下,该 机构 必须确保其所属集团层面的策略、流程和系统,使其能够评估在其运营发生严重但合理的扰断时,该 集团 层面的 重要集团业务服务 是否能够保持在影响容忍度范围内。 22.5 如果 机构 是2.1(3)所涵盖的 集团 的成员,22.2、22.3和22.4不适用,前提是符合22.6的情况下,集团母公司总部所在的第三国家根据 偿付能力II指令 第260条、 授权法案 第380和380A条的规定被评估为等同的,或根据2019年金融服务和杂项规定(修正等)(退出欧盟)条例附表1第12段作出的等效确定。 22.6 22.5不适用于在 偿付能力II指令 第260(5)条规定的临时等价情况下, 集团 中 偿付能力II承保 的资产负债表总额超过位于英国和直布罗陀以外的母公司的资产资产负债表总额的情况。 22 GROUP OPERATIONAL RESILIENCE 22.1 Rules 22.2 to 22.5 apply to any UK Solvency II firm that is a member of a group for which the PRA is the group supervisor . 22.2 Where a firm is a member of a group covered by 2.1(1), 2.1(2) or, subject to 22.5, 2.1(3), the firm must also comply with Operational Resilience – Solvency II Firms 2.1 and 2.2 in relation to its important group business services . 22.3 Where a firm is a member of a group covered by 2.1(1), 2.1(2) or, subject to 22.5, 2.1(3), with the exception of Operational Resilience – Solvency II Firms 3.1(3), the firm must ensure that the strategies, processes and systems at the level of the group of which it is a member comply with the obligations set out in Operational Resilience – Solvency II Firms 3. 22.4 Where a firm is a member of a group covered by 2.1(1), 2.1(2) or, subject to 22.5, 2.1(3) the firm must ensure that the strategies, processes and systems at the level of the group of which it is a member enable the firm to assess whether important group business services at the level of the group could remain within the impact tolerance in the event of a severe but plausible disruption to its operations. 22.5 Where a firm is a member of a group covered by 2.1(3), 22.2, 22.3 and 22.4 do not apply if, subject to 22.6, the third country in which the group’s parent undertaking has its head office is assessed to be equivalent under Article 260 of the Solvency II Directive , Article 380 and 380A of the delegated act, or an equivalence determination under paragraph 12 of Schedule 1 of The Equivalence Determinations for Financial Services and Miscellaneous Provisions (Amendment etc) (EU Exit) Regulations 2019. 22.6 22.5 does not apply where, in the case of temporary equivalence under Article 260(5) of the Solvency II Directive , there is a Solvency II undertaking in the group that has a balance sheet total that exceeds the balance sheet total of the parent undertaking situated outside of the UK and Gibraltar.

外部定义术语(EXTERNALLY DEFINED TERM) 术语 Term 定义来源 Definition source 合并情况 consolidated situation 2013年6月26日欧洲议会和理事会关于信贷机构和投资公司审慎要求的第575/2013号法规(EU)第4(1)(47)条以及第648/20号法规(欧盟)修正案 Article 4(1)(47) of Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms and amending Regulation (EU) No 648/20


本公众号(ID: bcmplus)专注于业务连续性和运营韧性知识的传播和普及,关注业务连续性、应急和危机管理的朋友可关注本公众号。

由于公众号注册时腾讯已调整政策,未能开通留言功能,希望交流和讨论业务连续性管理问题,或获取相关资料的朋友,可长按以下二维码加入知识星球留言和讨论(公众号1月只能发4次文章,也会有一些观点直接在知识星球而不在公众号发布)。


原文发表于公众号”业务连续性+” | 原文链接