Definition:SM&CR
📋 SM&CR — the Senior Managers and Certification Regime — is the United Kingdom's principal framework for individual accountability within financial services firms, including insurers, Lloyd's managing agents, and regulated intermediaries. Introduced by the FCA and PRA, the regime replaced the earlier Approved Persons Regime and was extended to insurers in December 2018. SM&CR establishes a clear allocation of prescribed responsibilities to named senior individuals, making it possible to hold specific people — rather than faceless institutions — accountable when things go wrong.
🔧 The regime operates through three interconnected pillars. The Senior Managers Regime requires firms to obtain regulatory approval before appointing individuals to key roles — such as chief underwriting officer, chief risk officer, or claims director — and assigns each a formal Statement of Responsibilities mapping their accountability. The Certification Regime covers staff below senior management level who nonetheless perform functions that could cause significant harm, such as underwriters with material binding authority or individuals managing reinsurance programmes; firms must annually certify these employees as fit and proper. Finally, the Conduct Rules set baseline behavioral standards — including acting with integrity, exercising due care, and treating customers fairly — that apply to virtually all employees. For Lloyd's syndicates and their managing agents, the regime intersects with Lloyd's own governance and oversight requirements, creating layered accountability across the market.
💡 SM&CR has materially changed the governance culture within UK insurance organizations. Before its introduction, regulatory enforcement against individuals was hampered by the so-called "accountability firewall," where responsibility diffused among committees and boards. Now, when a supervisory failure emerges — say, inadequate reserving oversight or a breakdown in conduct risk controls — regulators can trace accountability to specific senior managers and assess whether they took reasonable steps to prevent the harm. This has had a ripple effect beyond the UK: international insurance groups headquartered elsewhere but operating in the London market must comply, and jurisdictions such as Hong Kong and Australia have developed analogous individual accountability regimes partly inspired by the SM&CR model. For insurtech firms entering the UK market, understanding and embedding SM&CR requirements from inception is essential to obtaining and maintaining regulatory authorization.
Related concepts: