SM&CR Responsibilities Maps: What Good Looks Like

Before examining the mechanics of responsibilities mapping, it is essential to understand the regulatory philosophy that underpins this requirement. The FCA's approach to accountability reflects a recognition that corporate structures can obscure individual responsibility, making it difficult to identify who should be held accountable when things go wrong. The responsibilities map addresses this by requiring firms to articulate, in advance, who is responsible for what.

The map serves multiple audiences. For the regulator, it provides a reference point for supervisory engagement and, where necessary, enforcement action. For the firm's board and senior management, it should provide clarity regarding the division of responsibilities and the boundaries between different executive domains. For individual senior managers, it defines the scope of their personal accountability and the areas where they must ensure appropriate controls are in place.

The responsibilities map should be understood as a living document that reflects the actual allocation of responsibilities within the firm at any given time. It is not merely a compliance artefact to be created at authorisation and updated reluctantly thereafter. Firms that treat the map as a dynamic governance tool derive significantly greater value from the SM&CR framework than those that view it as a regulatory obligation.

The FCA has been explicit that responsibilities should be allocated in a manner that creates clear individual accountability. This means avoiding allocations that are so broad as to be meaningless or so narrow as to create gaps. It also means ensuring that each senior manager has genuine authority over their allocated responsibilities, not merely nominal accountability for areas actually controlled by others.

An effective responsibilities map comprises several interconnected components that together provide a comprehensive picture of governance arrangements. The organisational structure diagram forms the foundation, showing reporting lines between senior managers and the relationship between executive management and the board. This diagram should be sufficiently detailed to illustrate how information flows upward and how direction flows downward through the management hierarchy.

The allocation of prescribed responsibilities requires particular attention. The FCA specifies certain responsibilities that must be allocated to senior managers within each firm. These prescribed responsibilities cover fundamental matters such as compliance with regulatory requirements, implementation of policies, and management of specific risk types. The map must show explicitly how each prescribed responsibility has been allocated, identifying the specific senior management function holder who bears accountability.

Overall responsibilities extend beyond prescribed responsibilities to encompass the totality of each senior manager's domain. The FCA expects the map to describe the business areas, activities, and management functions that each senior manager oversees. This description should be specific enough to enable a reader to understand what falls within each individual's accountability without being so granular as to become unwieldy.

Committee structures and their relationship to senior management accountability must be addressed. Many firms operate through committee governance, with important decisions taken collectively rather than by individual executives. The responsibilities map should explain how committee structures interact with individual accountability, clarifying who bears ultimate responsibility for matters addressed through committee processes.

The relationship between the responsibilities map and Statements of Responsibilities deserves emphasis. Each senior manager's Statement of Responsibilities should be consistent with and flow from the overall map. Where the map shows that an individual is responsible for a particular area, that same responsibility should appear in their personal statement. Inconsistencies between the map and individual statements create uncertainty and undermine the effectiveness of both documents.

Certain responsibilities present particular challenges for allocation, either because they span multiple areas of the business or because their boundaries are inherently ambiguous. The most common difficulties arise in relation to responsibilities that cut across traditional functional lines, such as conduct risk, culture, and operational resilience.

Conduct risk responsibility illustrates the complexity well. Conduct risk arises throughout the firm's activities, from product design through distribution to post-sale servicing. Allocating conduct risk responsibility to a single individual may create artificial concentration, yet distributing it across multiple individuals risks diluting accountability. The most effective approach typically involves allocating overarching conduct risk oversight to a senior executive whilst ensuring that operational conduct responsibilities are clearly embedded within business line accountabilities.

Matrix management structures present particular challenges for responsibilities mapping. Where individuals have dual reporting lines, whether to functional and business line managers, the map must clarify which reporting line takes precedence for accountability purposes. The FCA has indicated that matrix structures should not obscure accountability, meaning that ultimate responsibility must rest with identified individuals even where day-to-day management involves multiple parties.

Shared services arrangements, whether within a group structure or through outsourcing, require careful treatment. Where critical functions are performed centrally rather than within the regulated firm itself, the map must show how accountability is maintained. This typically involves allocating oversight responsibility to a senior manager within the regulated firm whilst acknowledging that operational delivery occurs elsewhere.

The treatment of temporary absences and deputy arrangements warrants explicit consideration. Senior managers inevitably take leave, fall ill, or become otherwise unavailable. The map should address how responsibilities are covered during such absences, including whether deputies have formal accountability during these periods. The FCA expects that coverage arrangements do not create gaps in accountability, even temporarily.

The responsibilities map must accurately reflect current arrangements at all times. This creates an ongoing obligation to review and update the map whenever significant changes occur. The triggers for such updates include changes in senior management personnel, reorganisations affecting reporting lines, introduction of new business activities, and material changes to governance committee structures.

The frequency of formal review should reflect the pace of change within the organisation. At minimum, an annual review ensures that gradual evolution in responsibilities is captured and documented. Firms undergoing significant change may require more frequent reviews to ensure the map remains accurate. The review process should be documented, with evidence retained showing that the map has been assessed for accuracy and updated where necessary.

Notification obligations to the FCA must be incorporated into change management processes. Certain changes to responsibilities trigger notification requirements, including changes to the allocation of prescribed responsibilities and significant changes to the scope of senior managers' accountabilities. Firms should establish processes to identify notifiable changes and ensure timely notification to the regulator.

The process for updating Statements of Responsibilities should be integrated with map maintenance. When the overall map changes, affected individuals' Statements of Responsibilities must be updated accordingly. This creates coordination requirements that firms must manage carefully to avoid inconsistencies between the map and individual statements.

Documentation of historical versions serves important purposes. The FCA may request sight of how responsibilities were allocated at a particular point in time, whether in connection with supervisory enquiries or enforcement investigations. Firms should retain historical versions of the map with clear effective dates, creating an audit trail of how accountability has evolved.

Regulatory engagement with firms regarding their responsibilities maps has revealed recurring deficiencies that applicant and authorised firms should seek to avoid. Understanding these common issues provides valuable guidance for constructing effective maps that meet regulatory expectations.

Insufficient specificity represents perhaps the most frequent concern. Maps that describe responsibilities in broad, generic terms fail to provide the clarity that the SM&CR framework requires. The FCA expects to be able to read the map and understand precisely who is accountable for specific activities and risks. Descriptions such as 'responsible for operations' or 'oversees risk management' are inadequate without further specification of what these terms encompass.

Gaps in allocation create regulatory concern. Every significant activity and risk within the firm should fall within the accountability of an identified senior manager. Maps that leave areas uncovered, whether through oversight or deliberate omission, fail to satisfy the comprehensiveness that the FCA expects. The review process should specifically test for gaps by reference to the firm's business activities and risk profile.

Overlapping responsibilities without clear delineation creates ambiguity regarding individual accountability. Where responsibilities naturally span multiple domains, the map should clarify how accountability is divided or identify which individual bears primary responsibility. The FCA has emphasised that shared responsibility does not mean diminished individual accountability; overlaps should be addressed explicitly rather than left ambiguous.

Disconnect between the map and operational reality undermines the document's utility and creates regulatory risk. If the map describes responsibilities that do not reflect how the firm actually operates, it fails both as a governance tool and as a compliance document. Regulatory engagement that reveals such disconnects typically prompts significant supervisory concern regarding the firm's governance more broadly.

The responsibilities map should not exist in isolation from other governance documentation. Effective firms integrate their maps with terms of reference for governance committees, job descriptions for senior roles, policy documents specifying approval authorities, and risk management frameworks identifying risk ownership. This integration ensures consistency across governance documentation and reinforces the accountability structures established in the map.

Board and committee terms of reference should reference and align with the responsibilities map. Where committees exercise delegated authority from the board, the map should reflect this delegation and the terms of reference should identify the senior managers accountable for matters within the committee's remit. This creates a coherent picture of how collective and individual accountability interact.

Policy documents frequently specify approval thresholds and decision-making authorities. These specifications should align with the responsibilities allocated in the map. Inconsistencies between policy documents and the responsibilities map create confusion regarding who has authority and accountability in specific circumstances.

The risk management framework provides another integration point. Risk ownership should be clearly linked to senior management accountability, with the responsibilities map and risk framework presenting a consistent view of who bears accountability for managing specific risks. This integration supports effective risk governance by ensuring that risk owners have appropriate seniority and authority.

Internal audit and compliance monitoring programmes should reference the responsibilities map when planning their activities. Testing governance arrangements and individual compliance with allocated responsibilities forms an important part of assurance activity. The map provides the reference point against which such testing should be conducted.

The responsibilities map occupies a central position in the SM&CR framework, serving both as a regulatory compliance document and as a practical tool for organisational governance. Firms that invest appropriate effort in constructing and maintaining their maps reap benefits that extend well beyond regulatory compliance, gaining clarity in their governance arrangements and supporting effective decision-making.

The characteristics of an effective map are not mysterious. Specificity, comprehensiveness, accuracy, and currency are the hallmarks of maps that satisfy regulatory expectations and serve their intended purpose. Achieving these characteristics requires genuine engagement with the mapping exercise, not merely completion of regulatory forms.

As the SM&CR framework matures and regulatory expectations crystallise through supervisory experience, the standard for acceptable responsibilities mapping continues to rise. Firms should not be content with maps that satisfied regulatory requirements at authorisation if those maps no longer reflect current expectations or organisational arrangements. Continuous attention to the responsibilities map ensures that this foundational governance document continues to serve both the firm and its regulators effectively.