FCA updates incident and third-party reporting rules with cyber-attacks on the up

The regulator today (18 March), set out that these rules will help it respond quickly to disruption such as a cyber-attack or power outage and give firms greater certainty on what to report and when, as well as strengthen firm resilience to better protect consumers and markets. Cyber-attacks are becoming more frequent and more sophisticated, the FCA noted, which means firms are increasingly reliant on third party providers. The watchdog highlighted that in 2025, more than 40% of cyber incidents reported to it involved a third party and it has seen several recent high-profile incidents...