Bank of England Fines Vocalink £11.9M for Risk Management Failures

Vocalink, a Mastercard-owned payment systems firm, has been fined almost £12m by the Bank of England for its failure to fully comply with a regulatory order to address weaknesses in its risk management framework. The firm's inadequacies in risk management and governance arrangements led to a significant fine, marking the first time the Bank has penalized a financial market infrastructure firm. The company had 45% of the fine reduced due to its cooperation and agreement to resolve the matter. Vocalink's shortcomings were linked to its inability to have a sufficiently integrated risk management framework in place, and the firm failed to escalate key risks and information to senior committees.

Key Takeaways:

• Vocalink, a Mastercard-owned payment systems firm, has been fined £11.9m by the Bank of England for failing to comply with a regulatory order to address weaknesses in its risk management framework.
• The firm's inadequacies in risk management and governance arrangements, including an ineffective risk management framework and weaknesses in its controls, governance arrangements, and escalation processes, led to the fine.
• Vocalink's shortcomings were linked to its inability to have a sufficiently integrated risk management framework in place, and the firm failed to escalate key risks and information to senior committees.
• The firm received a 45% reduction in the fine due to its cooperation and agreement to resolve the matter.
• Without the reduction, the fine would have stood at £20m.
• This marks the first time the Bank of England has fined a financial market infrastructure firm.
• Sarah Breeden, deputy governor for financial stability, stated that Vocalink fell short of its obligation to have adequate risk management and governance arrangements when responding to the Bank's direction.

Statistics:

• Vocalink was fined £11.9m by the Bank of England for its risk management failures.
• The firms' inadequacies resulted in a 45% reduction in the original fine of £20m.
• The fine was a result of Vocalink's inability to have a sufficiently integrated risk management framework in place, which led to weaknesses in its controls, governance arrangements, and escalation processes.

Sources:

• City Am: "Lloyds cuts jobs in risk management as it was 'blocker' on transformation progress"
• City Am: "People and organizations: Mastercard"
• City Am: "Pay"
• Bank of England: "2025, July: BOE fines Vocalink Limited"