New PRA requirements are reshaping how UK financial services firms manage Insider Risk. Are you ready?
Insider threats, whether caused by negligence, compromise, or malicious intent, are a growing concern across the financial sector.
In response, the Prudential Regulation Authority (PRA) now expects firms to demonstrate effective Insider Risk Management (IRM) aligned with operational resilience and regulatory mandates.
What's Inside the Guide?
A practical breakdown of PRA expectations
around Insider Risk
Guidance on implementing robust controls
to protect data
Insight into how to align with CBEST testing
and third-party risk
Whether you're in security, compliance, risk, or technology leadership, this guide gives you the clarity and confidence to act on the PRA's expectations.
Use it to benchmark your current program, identify gaps, and move from compliance uncertainty to operational strength.
“If someone's stressed, we're going to see that and get that fixed. We’ve had a case where [an employee] was going to harm a manager at their house.”
Everfox, formerly Forcepoint Federal, has been defending the world’s most critical data and networks against the most complex cyber threats imaginable for more than 25 years. As trailblazers in defense-grade, high-assurance cybersecurity, Everfox has led the way in delivering and developing innovative cybersecurity technology. Headquartered in Herndon VA, Everfox’s suite of cross-domain, threat protection and insider risk solutions empower governments and enterprise organizations to use data safely - wherever and however their people need it.
©2025 Everfox