FCA Enforcement Trends: What SMF Holders Actually Need to Know

Reading FCA final notices is not most people’s idea of useful preparation for a board or executive appointment, but it’s some of the most concrete evidence available of how the SMCR’s accountability framework actually operates in practice, as opposed to how it reads on paper. This post pulls out the patterns that matter most for anyone holding, or considering, an SMF designation.

Individual Accountability Is No Longer the Exception

In the years immediately after the SMCR’s introduction, enforcement action against named individuals remained relatively rare — most cases still resolved at firm level, with individual SMF accountability more a theoretical backstop than an active enforcement tool. That balance has shifted. The FCA has increasingly pursued individual senior managers directly, particularly where a firm’s own governance failure can be traced to a specific, identifiable gap in that individual’s oversight. Anyone taking on an SMF designation today should assume the personal accountability attached to it is a live enforcement risk, not a theoretical one.

What the Pattern of Cases Actually Shows

The “reasonable steps” defence is narrower than it sounds

The Duty of Responsibility requires an SMF holder to show they took reasonable steps to prevent a regulatory breach within their area. In practice, “reasonable steps” has been interpreted more narrowly than many senior managers initially assume. Delegating a task isn’t itself a defence if the individual failed to follow up on whether it was actually being done properly. Being unaware of a problem isn’t a defence if a reasonably diligent person in that role should have known. The bar is active oversight, not passive good intentions.

Documentation gaps are treated as substantive failures

A recurring theme across enforcement cases is that poor documentation of decision-making — no clear record of what was considered, what was challenged, what was escalated — is treated by the regulator as evidence the oversight itself was inadequate, not simply as an administrative shortcoming. SMF holders who can produce a clear paper trail of genuine challenge and escalation are in a materially stronger position than those who can only assert, after the fact, that appropriate oversight occurred.

Committee chairs are not shielded by collective decision-making

Board and committee decisions are, by design, collective. Enforcement action has nonetheless targeted committee chairs specifically where the chair’s own conduct of the committee — inadequate challenge, insufficient escalation, a failure to ensure the committee actually had the information it needed — fell short, independent of what the rest of the committee did. This is a direct, practical illustration of why SMF9, SMF10, SMF11, SMF12 and SMF14 holders can’t rely on “the board decided” as a shield.

Control function independence gets specific scrutiny

Where enforcement action has touched SMF4, SMF5 or SMF16 holders, a common thread is a control function that lacked genuine independence from the business lines it was meant to be overseeing — either through a compromised reporting line or through the individual’s own insufficient willingness to escalate uncomfortable findings. This reinforces a point we make across our designation guides: independence has to be structurally real, not simply asserted.

What This Means for Recruitment, Not Just for Incumbents

These patterns matter directly to how firms should approach an SMF search. A candidate’s prior experience of actually documenting genuine challenge and escalation — not simply attending meetings where challenge was theoretically possible — is a meaningfully better predictor of how they’ll perform under the Duty of Responsibility than general seniority. Reference conversations that probe specifically for this — “tell me about a time you escalated something the business didn’t want to hear, and show me how that was recorded” — surface far more useful signal than a standard competency-based reference check.

It also means firms should think about the infrastructure around an SMF appointment, not just the individual. A strong candidate placed into a firm with poor governance documentation practices, or a reporting structure that compromises their independence, is being set up to carry personal accountability for a structural problem that predates their appointment. Part of a properly run search is flagging this to the firm before the appointment is made, not leaving the incoming SMF holder to discover it on their own.

Why This Reinforces Rather Than Changes Our Approach

None of this changes the fundamentals we build into every search — the fit and proper assessment shaping the shortlist, sector-specific rather than general regulatory experience, and genuine independence rather than formal independence on paper. It does reinforce why those fundamentals matter as much as they do: the gap between a candidate who looks right on paper and one who will genuinely hold up under the Duty of Responsibility is exactly the gap that recent enforcement activity has made visible.