Blog & Articles FCA Penetration Testing Requirements for Firms That Aren’t Tier-One by Rebecca Sutton August 30, 2026 by Rebecca Sutton August 30, 2026 CBEST and STAR-FS grab the headlines, but most FCA-regulated firms need a different answer. Here is what operational resilience testing actually requires if you’re not a systemically important bank. FacebookTwitterLinkedinEmail