SUP: The FCA Supervision Manual Explained

Notifications, Returns, Supervisory Categories and the Operational Reality of FCA Supervision

SUP — the Supervision Manual — is the FCA Handbook module that defines how the FCA supervises authorised firms and how firms must engage with the supervisory process. SUP covers everything from how the FCA categorises firms for supervisory attention, through the formal notifications firms must make to the FCA when material events occur, to the regulatory returns firms must submit at prescribed intervals, to the procedures around senior management approval, waivers, and variations of permission. Understanding SUP — and operating effective SUP-compliant processes — is foundational to running an FCA-regulated firm.

This guide explains how SUP actually works in practice — the supervisory framework, the notification regime, the regulatory returns landscape, the senior management approval process, and the broader supervisory relationship between the FCA and authorised firms. It also covers the recruitment dimension — the senior team that owns SUP compliance, and the FCA dialogue capability that’s increasingly important in senior compliance and SMF roles.

What’s missing from most online explanations of SUP is the practical operational detail. SUP is large and procedural; what’s harder to find is how the supervisory relationship actually operates day-to-day, what good notification practice looks like, and where firms commonly fall short. That’s the gap this guide fills.

The Structure of SUP

SUP is structured into multiple chapters covering distinct supervisory topics. The principal chapters include:

• SUP 1A — the FCA’s approach to supervision
• SUP 2 — information gathering by the FCA on its own initiative
• SUP 3 — auditors
• SUP 4 — actuaries
• SUP 5 — skilled persons (Section 166) — see our Section 166 Guide
• SUP 6 — applications to vary or cancel permission
• SUP 7 — individual requirements imposed by the FCA
• SUP 8 — waivers and modifications
• SUP 9 — individual guidance
• SUP 10A-10C — approved persons and senior managers — see our Senior Managers Regime Guide
• SUP 11 — controllers and close links
• SUP 12 — appointed representatives — see our Appointed Representative Guide
• SUP 13 — exercise of passport rights by UK firms (relevance reduced post-Brexit)
• SUP 14-15 — incoming firms and notifications
• SUP 16 — reporting requirements (regulatory returns)
• SUP 17-18 — additional reporting requirements

The most operationally engaged sections for most firms are SUP 15 (notifications), SUP 16 (regulatory returns), and SUP 10C (SMF approval).

SUP 15 — The Notification Regime

SUP 15 establishes the substantive notification requirements — when firms must inform the FCA of material events. The regime operates on multiple tiers:

SUP 15.3 — Mandatory notifications

Specific events that must be notified include:

• Significant breaches of regulatory requirements
• Material changes in firm circumstances
• Material litigation or regulatory action against the firm
• Material changes in business activity or risk profile
• Suspected market abuse
• Material customer complaints patterns
• Significant operational incidents
• Senior management changes
• Controller changes
• Material events affecting fitness and propriety of approved or certified persons

SUP 15.7 — Communication with the FCA

How notifications must be made — typically through Connect, email to the case officer, or specific notification forms depending on the matter.

The Principle 11 overlay

Beyond specific SUP 15 requirements, Principle 11 of the Principles for Businesses imposes a broader obligation to deal openly and cooperatively with the FCA, including disclosure of anything the FCA would reasonably expect notice of. See our FCA Principles Guide. The Principle 11 standard captures matters that may not engage specific SUP 15 requirements but are nonetheless material to the supervisory relationship.

SUP 16 — Regulatory Returns

SUP 16 establishes the regulatory returns regime — periodic data submissions from firms to the FCA. Regulatory returns vary substantially by firm type and include:

Common returns

• Annual financial returns
• Quarterly capital adequacy returns
• Customer complaints data
• Conduct of business data
• Operational risk data

Sector-specific returns

• Investment firms (MIFIDPRU) — comprehensive prudential returns including ICARA-related data. See our MIFIDPRU & IFPR Guide
• Banks and building societies — comprehensive Common Reporting (COREP) and Financial Reporting (FINREP) returns
• Insurance firms — Solvency II Quantitative Reporting Templates
• Payments firms — sector-specific returns under the PSR/EMR
• Consumer credit firms — sector-specific data including affordability assessment data
• Asset managers — fund-level and firm-level returns

Specialist returns

• Transaction reporting (MiFIR)
• Trade reporting
• Money market reporting
• Reference data
• Various specialist reports for specific activity types

Regulatory reporting is itself a substantial operational discipline — see our Regulatory Reporting Guide for detail. Investment in regulatory reporting infrastructure is a significant cost component of running a regulated firm.

SUP 10C — SMF Approval Process

SUP 10C establishes the Senior Management Functions approval process. For each SMF appointment, the firm must:

• Conduct internal Fit & Proper assessment (see our Fit & Proper Test Guide)
• Obtain regulatory references for the candidate (see our Regulatory References Guide)
• Submit Form A application via Connect
• Provide supporting documentation including Statement of Responsibilities
• Pay the application fee

The FCA’s review:

• Examines the firm’s documented assessment
• Conducts independent verification of key matters
• May interview the candidate (particularly first-time SMFs)
• Coordinates with PRA for dual-regulated firms
• Reaches determination — typically within 12 weeks for straightforward applications, longer for complex cases

For detail on the SMF roles themselves, see our individual SMF guides including SMF2, SMF4, SMF16, SMF17, SMF18, and SMF24.

SUP 5 — Skilled Persons (Section 166)

SUP 5 sets out the framework for FCA-commissioned skilled person reviews under section 166 FSMA. Skilled person reviews are one of the FCA’s most consequential supervisory tools — used where the FCA wants substantive independent investigation of specific matters in a firm. See our Section 166 Guide for detail.

SUP 6 — Variation of Permission and Cancellation

SUP 6 covers the procedures for varying or cancelling firm permissions:

Variation of Permission (VoP)

Where firms want to add new regulated activities, remove activities, or change limitations or requirements attached to permissions. VoP applications are similar in process to initial authorisation but typically narrower — see our FCA Application Process Guide.

Cancellation

Where firms voluntarily cease regulated activity, or where the FCA cancels permission. Voluntary cancellation typically requires demonstration that the firm has wound down its regulated activity in an orderly way. See our Wind-Down Planning Guide.

SUP 1A — The FCA’s Approach to Supervision

SUP 1A sets out the FCA’s overarching supervisory approach. Key features include:

Risk-based supervision

The FCA categorises firms into supervisory categories based on the risk they pose to the FCA’s objectives. Higher-risk firms receive more intensive supervisory attention; lower-risk firms receive less direct contact but remain subject to all regulatory requirements.

Supervisory categories

The FCA operates supervisory categories (historically Conduct Categories C1, C2, C3, C4, with the system updated periodically). The category affects:

• The supervisory team allocated to the firm
• The frequency of supervisory engagement
• The depth of supervisory review
• The thresholds for various supervisory tools

Supervisory tools

The FCA’s supervisory toolkit includes:

• Routine supervisory dialogue and meetings
• Thematic reviews across firm populations
• Firm-specific supervisory reviews
• Section 166 skilled person reviews
• Market sounding and information requests
• Variation of Permission to impose limitations or requirements
• Enforcement action where supervisory tools are insufficient

The Supervisory Relationship in Practice

Beyond the formal SUP framework, the operational supervisory relationship has substantive features:

Case officer relationship

For larger firms with named supervisory teams, the case officer relationship is a primary channel for FCA dialogue. Strong case officer relationships involve regular engagement, proactive disclosure of material matters, and substantive cooperation on supervisory questions.

Thematic engagement

The FCA regularly conducts thematic reviews across firm populations — investigating specific issues across multiple firms. Firms identified for inclusion typically receive substantial information requests with tight deadlines.

Supervisory letters

The FCA issues “Dear CEO” letters and other supervisory communications setting out expectations across the regulated population or specific sectors. Strong firms ensure substantive engagement with these communications and document their response.

Senior management attestations

The FCA increasingly requires senior management attestations on specific matters — for example, attestations on Consumer Duty preparedness, operational resilience implementation, or financial crime framework effectiveness.

Common SUP Compliance Pitfalls

Notification failures. Where material matters that should have been notified to the FCA are identified internally without prompt notification.

Late or incomplete regulatory returns. Returns submitted late, with errors, or with incomplete data — particularly common in firms scaling beyond their reporting infrastructure capacity.

SMF approval delays through inadequate applications. Form A applications with weak supporting documentation, inadequate Fit & Proper substantiation, or incomplete Statement of Responsibilities frequently face extended review.

Principle 11 disclosure gaps. Where matters that the FCA would reasonably expect to be notified are managed internally without disclosure.

Supervisory dialogue weakness. Where the firm’s engagement with FCA dialogue is reactive, defensive, or inadequately resourced.

Inadequate audit trail. Where supervisory communications are not retained appropriately or where the firm cannot demonstrate substantive engagement with FCA expectations.

Case officer relationship gaps. Where senior management is not substantively engaged in case officer dialogue.

Reporting infrastructure weakness. Where the firm’s regulatory reporting infrastructure cannot support the volume and complexity of returns required.

SUP and Senior Recruitment

SUP compliance shapes senior recruitment substantially:

• SMF16 (Compliance Oversight) — typically owns SUP-related compliance including notifications and supervisory dialogue. See our SMF16 Guide
• SMF1 (CEO) — typically allocated overall accountability for FCA relationship
• SMF2 (CFO) — owns regulatory reporting accuracy and timeliness
• Heads of Regulatory Reporting — increasingly common as a specialist role
• Heads of Compliance — operational head supporting SMF16 on SUP matters
• FCA Liaison roles — at larger firms, dedicated roles managing the FCA relationship

For senior compliance leadership, the FCA dialogue capability has become a meaningful interview topic. Strong candidates demonstrate experience leading firm-FCA engagement, managing supervisory dialogue substantively, and producing regulatory communications and submissions effectively.

Further Reading and Authoritative Sources

For SUP itself, see SUP in the FCA Handbook. For the FCA’s published approach to supervision, see the FCA’s supervision pages.

Related Guides: FCA Handbook and Authorisation

Part of FD Capital’s series of practical guides for FCA-regulated firms: SYSC — Senior Management Arrangements | PRIN — The 11 FCA Principles | DISP — Dispute Resolution | PERG — Perimeter Guidance | How to Become FCA Authorised | The FCA Application Process & Costs | FCA Threshold Conditions | Section 166 Skilled Person Reviews | Regulatory Reporting | SMF16 — Compliance Oversight