SYSC explained: FCA systems and controls

SYSC is the FCA Handbook sourcebook covering senior management arrangements, systems and controls.

Consumers do not usually need to cite SYSC in an ordinary complaint. But it can become relevant where the problem points beyond a one-off customer-service mistake to defective processes, record keeping, governance, responsibility, controls or repeated failures across a firm's systems.

SYSC is broad and its application varies considerably between firms and chapters. It should therefore be used carefully and usually as context alongside the rule governing the actual consumer issue.

Key points

SYSC is primarily about how regulated firms organise and control their businesses.
Principle 3 also requires firms to organise and control their affairs responsibly and effectively with adequate risk-management systems.
Different SYSC chapters apply differently to different types of firm.
For an individual complaint, the specific conduct rule normally comes first.

What “systems and controls” means

At its simplest, systems and controls are the arrangements a firm uses to make sure its business operates properly: reporting lines, responsibilities, policies, procedures, compliance arrangements, record keeping, risk controls, oversight and, where relevant: business continuity and outsourcing controls.

For example, SYSC 3.1 contains a rule requiring firms within its scope to take reasonable care to establish and maintain systems and controls appropriate to their business.

Why this can matter to a consumer

A complaint may expose a process failure rather than a single incorrect decision. Different departments may hold contradictory account statuses; complaint handlers may be unable to retrieve the sales evidence they are supposed to assess; automated processes may continue reporting or collection action after a dispute is upheld; or the same root cause may affect many customers.

Those facts can be relevant regulatory intelligence. They do not automatically prove a specific SYSC breach, but they may show why the issue should be examined as a systems problem rather than dismissed as an isolated error.

SYSC and the Consumer Duty

The Consumer Duty makes this relationship particularly visible. PRIN 2A requires firms within scope to monitor customer outcomes, and current FCA rules connect the Duty to firms' governance and risk-control arrangements.

A recurring customer-support failure may therefore engage a detailed conduct rule, a Consumer Duty outcome and the firm's internal systems/control framework at the same time.

Do not use SYSC as a shortcut

SYSC contains many chapters with different application provisions. A rule that applies to one category of firm may not apply in the same way to another. Before relying on a specific SYSC reference, check the application section and the date of the conduct.

For most consumers, it is better to establish the concrete failure first: the wrong data, missing evidence, complaint-handling defect, unaffordable lending decision or collection conduct. Then consider whether the surrounding facts also point to a wider systems-and-controls concern.

Using SYSC

When it adds something useful

The same failure recurs despite repeated correction requests.
Different internal systems contain incompatible versions of the same material fact.
The firm cannot identify who or what process made an important decision.
Required evidence appears not to be retained or retrievable.
A complaint reveals a wider process that may affect other customers.

In those situations, preserve the underlying records. The evidence of the system failure is more important than simply alleging poor controls.

Common traps

Keep the hierarchy straight

Do not assume every SYSC chapter applies to every regulated firm.
Do not turn a normal customer-service mistake into an unsupported allegation of systemic misconduct.
Do not use SYSC instead of the specific rule that directly governs the consumer issue.
Regulatory reporting to the FCA is separate from seeking personal redress through the firm/FOS route.

Official sources

Check the live rules

SYSC is highly application-sensitive. Check the relevant chapter's application provisions before relying on a specific rule.