Sebastian Mrotzek, Director of Operations, Finova
Last month, we welcomed customers and Escode, part of NCC Group, to the Finova HQ for our stressed exit simulation workshop. The session gave firms the chance to test how they would respond if a critical technology supplier suddenly failed, using a realistic and time-pressured scenario involving the immediate wind-down of a major provider.
The aim was straightforward: to help teams understand how a stressed exit might unfold, where gaps in their response could appear, and what steps would genuinely strengthen their continuity and exit planning.
The workshop brought together Finova specialists and our customers for open discussion, alongside expert input from Escode, who shared their perspective on operational resilience, cyber risk and supplier failure scenarios. Escode work closely with financial services firms to test, assess and strengthen resilience frameworks, making their insight particularly valuable in shaping the exercise.
What followed was a collaborative, hands-on session. Teams challenged assumptions, compared approaches, and talked honestly about what works well today and where further work is needed. Below is a summary of the key themes that came out of the day.
A realistic exit scenario
We began with an abrupt trigger - a critical supplier entering administration with no notice. In the scenario, firms had only three weeks of limited system access before services would be withdrawn completely.
The exercise quickly showed how crucial the first few hours are. Attendees emphasised the value of clear escalation paths, accurate contact lists, and ready-to-use regulatory and internal communications. Several reflected on how easily time is lost without these foundations and how much smoother the response feels when a well-prepared playbook guides early decisions.
Escrow in practice, not just on paper
A significant part of the workshop focused on escrow. Our partners at Escode explained what happens when an agreement is triggered, which materials should be included, and how frequently firms should verify deposits.
This prompted broader discussion around the practical realities of escrow. While escrow can provide access to code, documentation and infrastructure materials, it works best when supported by strong internal preparation.
A key takeaway emerged - while escrow remains an important safeguard, its effectiveness depends on how prepared organisations are. Clear processes, trusted partners and well-maintained documentation all play a role in maintaining control and continuity during a crisis.
Planning for an uncooperative exit
One of the strongest insights from the workshop was the difference between cooperative and uncooperative exit scenarios. Many continuity plans assume ongoing supplier support. Our simulation removed that safety net with no development team, no non-critical support and a fixed shutdown date.
This prompted firms to think honestly about their own resilience. Could they assume control of key services quickly enough? Would external specialists be available if every affected firm needed help at the same time? These questions highlighted the importance of preparing for the more challenging, but more realistic, versions of stressed exits.
Documentation that actually helps
Documentation emerged as a central theme during the session. Beyond simply having technical materials in place, the discussion focused on the importance of keeping documentation relevant, clear and genuinely useful.
This led into wider discussion around knowledge transfer, succession planning and how organisations retain critical system understanding over time. The shared view was simple: documentation needs to be current, concise and easy to navigate if it’s going to provide real support during periods of disruption.
Resilience is a shared effort
The workshop also highlighted the value of collaboration across the industry. Participants shared approaches, compared challenges, and discussed how suppliers, hosting partners, and managed service providers can play an even stronger role in future exercises.
There was particular interest in involving more partners, especially hosting providers, so firms can see a fuller end-to-end resilience picture. I’ll be following up early this year with updates on the actions and next steps raised during the session.
Looking ahead
Scenario testing remains one of the most effective ways for firms to turn regulatory expectations into practical readiness. The workshop highlighted the progress being made across the industry, while also reinforcing the importance of maintaining focus in this area.
We’ll continue hosting these sessions this year, including dedicated exercises focused on cyber incidents, hosting arrangements and supplier step-in scenarios.
Interested in attending a future workshop?
If you’d like to take part in upcoming sessions, please speak to your Finova account manager or contact us at events@finova.tech
