FCA Pulls DeFi Into Existing Resilience Rules
The FCA is pushing DeFi into mainstream resilience supervision, requiring firms to prove they can map and manage end-to-end service dependencies.
What is this trend?
The FCA is extending existing operational resilience requirements to regulated firms using or interacting with DeFi, forcing end-to-end mapping of on-chain and off-chain dependencies.
- DeFi is being folded into existing FCA resilience rules, not given a separate regime.
- Firms must map smart contracts, oracles, bridges, key management, and governance.
- Impact tolerances now cover services spanning trading, settlement, lending, staking, and redemption.
- Supervisory evidence must show dependencies the firm does not control, not just internal systems.
- Cryptoasset firms are expected to come into scope from October 2027.
What’s the latest?
The FCA’s October 2026 consultation GC26/7 pushes operational resilience into DeFi, applying existing rules to regulated firms wherever they use or interact with decentralized finance; cryptoasset fir
How it developed
Go deeper
Curated long-form picks on this trend — podcasts, videos, and analysis, by seniority.
If you're an individual contributor
A way to fix the federal government’s approach to cybersecurity compliance - Federal News Network
Opinion piece arguing GRC engineering automates evidence for continuous validation, speeding federal cybersecurity compliance.
Federal News Network · News
Read →
Five Key Questions to Evaluate GRC Automation Platforms
An explainer on GRC automation, covering continuous testing, reusable compliance evidence, and human oversight.
Cyberwox Unplugged · Substack
Read →
Practical Governance Playbook for Security Leaders Facing Rapid Threats
A how-to interview on shifting security from periodic maintenance to continuous risk validation at machine speed.
The AI in Business Podcast · Podcast
Listen from 15:16 →If you manage a team
Code Review After Code Gets Cheap
Explainer news piece on code review after cheap generation—shifting risk ops from maintenance to validation via traceability.
O'Reilly Media · News
Read →Supply Chain Risk Management Is Moving From Alert Generation to Operational Response - Logistics Viewpoints
News analysis on mapping supply-chain alerts to operational exposures and mitigation workflows for faster validation.
Logistics Viewpoints · News
Read →If you lead the organization
Challenges in Scaling Platform Teams and Shared Infrastructure
YouTube analysis with Patrick Debois & Tessl on validating coding agents via shared registries and guardrails.
AI Engineer · YouTube
The once-core beliefs 8 supply chain leaders ditched
News profile interview with Dave Fergus and Scott Meiser on shifting supply-chain automation from maintenance to validation.
Becker's Hospital Review · News
Read →The Proof Is In the Platform: Why Modern GRC Teams Choose Hyperproof Over Trackers
Promotion news piece comparing tracker-based GRC to automated validation workflows and AI assurance for risk ops.
Security Boulevard · News
Read →