ADM Investor Services International
£6.47mFAILURE PATTERN
Inadequate AML systems and controls; FCA had raised concerns earlier; little evidence of adequate ongoing monitoring through periodic customer reviews.
View FCA sourceContinuous Regulatory Assurancefor FCA-Regulated SMEs
HIMAYA helps regulated firms monitor control drift, evidence gaps, remediation ownership, and regulatory posture before audits, incidents, or board-level scrutiny expose the weakness.
Most regulated firmsdo not failbecause they lack tools.
They fail because control discipline breaks down between reviews - and no one is watching.
The problem is not that regulated firms have no controls. The problem is that controls decay quietly between reviews. HIMAYA exists to detect that decay before it becomes a breach, audit failure, FCA query or board-level crisis.
01
No Visibility
No live view of which controls are healthy, drifting, or failing. Governance runs on assumption, not evidence.
02
Fragmented Evidence
Proof spread across folders, emails, and tools. When scrutiny arrives, there is no coherent audit trail.
03
Unclear Ownership
No one clearly owns remediation or review actions. Issues are logged but never closed with accountability.
04
Reactive Governance
Audit prep happens under pressure. Continuous discipline is replaced by seasonal activity and scramble.
HIMAYA turns those weaknesses into a live, structured assurance system.
Controls decay quietly
between reviews.
Control drift happens when a firm's documented controls no longer match reality. MFA exceptions grow, access reviews become overdue, evidence goes missing, owners become unclear and remediation deadlines slip. On paper, the firm may still look controlled. In reality, its operating discipline is weakening.
Six services. One structured
assurance system.
Every HIMAYA service is designed to produce a clear assurance output: visibility, evidence, ownership, remediation tracking, or board-ready reporting.
FCA-Regulated SME
Control Drift Checklist
Assess your own evidence, access reviews, MFA exceptions, backup testing, owner mapping and remediation deadlines. Free practical checklist. No obligation.
- 20 control drift indicators to assess
- Evidence readiness self-check
- Owner mapping worksheet
- Remediation deadline tracker
Built for regulated firms where control drift becomes regulatory exposure.
Initial focus: FCA-regulated SMEs with 10-100 employees, small compliance teams, MSP support and manual internal governance.
FCA SYSCUK GDPR / ICOISO 27001Cyber EssentialsSRA (Future)
FCA enforcement shows what weak control discipline can cost.
FCA enforcement actions repeatedly show the same operational pattern: controls are not tested properly, monitoring gaps persist, remediation is delayed, risk ownership is unclear, and firms struggle to evidence effective governance when challenged.
£6.47m
Sigma Broking Limited
£1.087mFAILURE PATTERN
Failed to submit complete and accurate transaction reports for five years; 924,584 incorrect reports after independent review.
View FCA sourceStarling Bank
£28.96mFAILURE PATTERN
Growth outpaced financial crime controls; opened over 54,000 accounts for high-risk customers despite a restriction being in place.
View FCA sourceMetro Bank
£16.675mFAILURE PATTERN
Monitoring gaps affected over 60 million transactions worth over £51bn; concerns raised by junior staff did not lead to a proper fix.
View FCA sourceEquifax Ltd
£11.164mFAILURE PATTERN
Failed to manage and monitor outsourced UK consumer data security; breach exposed millions of consumers to risk.
View FCA sourceThese examples are public FCA enforcement cases. They are not HIMAYA clients, and HIMAYA does not claim it would have prevented these outcomes. They are shown to highlight recurring governance, monitoring, evidence, and control issues.
Read FCA Enforcement AnalysisStructured assurance.
Predictable investment.
Essential Regulated Assurance+ / month from flexible by scope
Simple monthly tiers - pricing stays flexible because every firm's scope, footprint, and data sources differ. We confirm the right package on a fit call. For many regulated SMEs, HIMAYA provides structured oversight at a fraction of the cost of adding senior internal compliance headcount.
Essential £750Regulated £1,250Assurance+ £1,850 - indicative monthly from; final fees reflect scope and complexity. Confirmed on a fit call. No long-term lock-in for initial pilots where offered.
Questions we hear from
regulated SMEs.
See where your governance is
drifting before scrutiny forces
the question.
Book a 15-minute discovery call to see whether your current controls, evidence, and remediation discipline would stand up under regulatory pressure.
Flexible monthly packagesDemo response within 24 hoursFCA-regulated firm focusNo sensitive data via public forms
HIMAYA provides cybersecurity, governance, risk, compliance and operational assurance support. HIMAYA does not provide legal advice, regulatory representation, or guarantee regulatory outcomes.