NCSC (National Cyber Security Centre) - ncsc.gov.uk
NIST Cybersecurity Framework 2.0 - nist.gov/cyberframework
BCI (Business Continuity Institute) - thebci.org
FCA (Financial Conduct Authority) - fca.org.uk
Bank of England and PRA - bankofengland.co.uk
NIS Regulations 2018 (UK) - legislation.gov.uk
NIS2 Directive and DORA (EU) - eur-lex.europa.eu
ISO 22301 business continuity - iso.org
Financial services firms face FCA operational resilience rules, PRA SS1/21 and SS2/21, and DORA where applicable. Critical national infrastructure work is shaped by the UK NIS Regulations and relevant sector duties: mapping dependencies, testing recovery and clear ownership matter. In pharmaceuticals, quality, safety and supply obligations sit alongside technology and cyber risk; the Seqirus engagement on our Clients page is one example. We adapt the work to each organisation and its actual obligations, rather than using a financial-services template.
