ESG factors in credit analysis and the boundary with standalone ESG ratingsGuide to applications and ongoing compliance

Considering ESG factors in credit ratings remains part of CRA credit analysis, and their effect on credit quality should be explained. Standalone ESG ratings assessing the environmental, social and governance performance of companies or products are not automatically covered by the same registration merely because the provider is already a CRA; the application and exclusions of the future ESG regime must be checked separately.[23] [31]

Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.

• Compliant ratings may enter the chain of ratings used by UK-regulated institutions. Banks, insurers or fund managers meeting their own prudential rules and applicable ratings requirements may use ratings issued or endorsed by a UK-registered CRA, or issued by an eligible certified CRA. Registration does not mean that FCA guarantees rating accuracy or investment safety.[1] [5] [6]

• UK registration establishes clear requirements for independence, methodological transparency and disclosure of historical performance. Issuers and investors can verify institutions and ratings using the FCA register, public ratings databases and historical rating statistics. CRA should not promote registration as government endorsement of rated issuers or financial products.[1] [7]

• The framework provides scope for small specialist CRA to compete in the market. Where an issuer intends to use two or more CRA, it should consider at least one agency with a market share not exceeding 10% and record its decision if it does not do so. This is a duty to consider aimed at encouraging competition, not a guarantee of business for small agencies or a requirement for issuers to engage a specified agency.[20]

Credit ratings must make the classification and materiality of ESG inputs and the reasons for rating actions transparent and consistent. On 2026-11-03, FCA published the final PS26/22 ESG rules. Application arrangements for standalone ESG ratings begin on 2027-06-24, and the regime takes effect on 2028-06-29. As of the review date, it must not be advertised as a new CRA licence already in operation.[23] [31] [32]

Shareholders and ultimate control structure: the FCA CRA application guidance requires disclosure of persons directly or indirectly holding at least 5% of capital or voting rights, or able to exercise significant influence over management, together with relevant companies with shareholding links and the parent-company structure. Article 6a restricts cross-shareholdings in other CRAs, rights to appoint or remove directors, and control rights for shareholders reaching 5%, with exceptions for intra-group investments and certain diversified collective investments. Linked shareholdings of 5% and 10% involving rated entities may also respectively trigger disclosure requirements or prohibitions on issuing ratings; a 10% controller list alone is insufficient.[7] [9] [12]

Directors and senior executives: they must be of good repute and have sufficient financial services skills and experience. In principle, at least one-third, and no fewer than two members, of the board or supervisory body must be independent and not involved in rating activities. Independent members' remuneration must not be linked to business performance; their fixed term must not exceed five years and is not renewable. Unless an applicable exemption is obtained, ordinary company governance with only one executive director cannot replace CRA governance. When conducting securitisation ratings, at least one independent director and one other director must have senior-level experience in the relevant securitisation market.[7] [11]

Compliance and methodology review: in principle, there should be an independent, continuously effective and adequately resourced compliance function whose head can access all necessary information and reports regularly to senior management and independent directors. Independent review of methodologies, models and key assumptions should be separate from the ratings business line; internal audit provides the third line of defence and tracks remediation. CRA registration itself should not be described as requiring all directors to apply for SMF1, SMF3 or SMF17. If the same legal person also holds FSMA authorisation, the corresponding individual approval and SM&CR requirements must be assessed separately.[7] [9] [13] [21] [23]

UK substance and professional teams: a UK legal entity should have arrangements capable of genuinely taking responsibility for governance, analysis, quality control and regulatory communications, and retain records accessible to the regulator, rather than merely renting a mailbox or substituting a Hong Kong consultancy address for business premises. Official CRA materials do not require all directors to be UK nationals, prescribe a fixed number of UK-resident directors or set a uniform minimum headcount; applications should demonstrate that workload and experience are aligned with the types and complexity of ratings. UK entity substance issues for third-country certification should be assessed separately under the physical presence exemption in Article 5, rather than applying domestic registration arrangements.[2] [6] [7] [9]

Using ESG factors in credit methodologies does not create a separate CRA minimum capital amount, but requires appropriate data, analytical and validation resources. Future application and ongoing conditions for standalone ESG ratings must be assessed under their final regime; insurance SCR must not be transplanted, nor CRA fees treated as ESG capital.[9] [23] [32]

Local registration is based on a UK-established legal person. The application must list the registered office, principal place of business, head office and branch arrangements, and explain where information, personnel and management functions are actually located. In principle, CRA rating records must be retained at the registered institution's premises and be accessible at the request of FCA. Shared offices or cross-border cloud services do not remove confidentiality, continuity or regulatory access obligations. No industry-wide mandatory standard for office floor area, a London address or UK residence for all personnel has been verified.[7] [8] [9]

Third-country certification applicants may seek a case-by-case waiver of the physical presence requirement under Article 5(4), demonstrating that the requirement imposes an excessive and disproportionate burden given the nature, scale and complexity of their business. Certification must not be described as an unconditional exemption from establishing a UK entity. The regulatory contact email for CRAs is creditratingagencies@fca.org.uk. Brand materials may be prepared by Tang Shangyong (Mr Tang) of Rengang Yongsheng (Hong Kong) Limited, but the consultant’s Hong Kong or Shenzhen address is not the applicant’s UK business address and does not constitute an approval channel acting for FCA.[2] [6]

• Dedicated application forms and evidence of legal status: use the current CRA registration or certification form of FCA and consult the corresponding guidance, rather than substituting ordinary consumer credit Full/Limited application forms. Attach the certificate of incorporation, articles or other legal status documents, relevant commercial register extracts and all business addresses. UK registration applications must be submitted in English under Article 15.[2] [9] [16]

• Ownership and group documents: provide information on direct and indirect holders of at least 5% of capital or voting rights, persons with significant influence, parent companies and associated undertakings, together with a complete structure chart. Explain investments in other CRAs, linked shareholdings involving rated issuers, cross-directorships and group service arrangements, to enable assessment of the conflict-of-interest restrictions in Article 6a and Annex I.[7] [9] [12]

• Senior management and director documentation: submit responsibilities, career histories, relevant financial services and credit rating experience, and recent criminal record documentation and good-repute self-declarations for senior managers. Independent directors should explain the basis of their independence, terms of office and remuneration arrangements. Directors responsible for securitisation ratings should provide additional evidence of senior-level experience in the relevant market, rather than listing the CeMAP mortgage qualification as a universally mandatory certificate for CRA.[7] [9]

• Organisation, compliance and internal audit documents: submit the organisational chart, reporting lines, compliance policies, risk management, independent methodology review and internal audit arrangements, and allocation of responsibilities. Where a group or outsourced provider performs some work, explain who actually performs it, how it is monitored and how information is obtained. Waiver applications should include evidence of headcount, proportionality and alternative controls.[2] [7] [9] [11]

• Financial and staffing resource documents: provide available standalone and consolidated financial reports for the preceding three years, applicable audit reports and parent company financial reports. Where the history is insufficient, provide interim reports and explain funding sources, financial forecasts, costs and staffing commitments, demonstrating the ability to conduct ongoing rating monitoring rather than merely uploading a bank balance certificate for a fictitious minimum capital amount.[9] [14]

• Rating business and methodology documents: specify proposed rating categories, rating symbols, default definitions, solicited or unsolicited rating models, initial rating and review processes, committee policies, models and back-testing arrangements. Provide data sources, quality checks, sensitivity analysis and procedures for insufficient information, along with actual fee and ancillary service policies, explaining how rating conclusions are protected from revenue pressures.[7] [9] [10]

• Systems, records and disclosure documents: provide the rating system architecture, segregation of fee information from analytical systems, access controls, confidentiality, record retention, business continuity and testing arrangements. Prepare public rating reports, press releases, transparency reports and database submission fields. Connection to the FCA ratings database and related technical preparations must be completed before the application decision.[2] [7] [9]

• Third-country-specific documents: certification submissions should include the basis of home-country authorisation or registration and supervision, jurisdictional equivalence eligibility, rating volumes and revenue, rating categories, and evidence of non-systemic importance to the UK market. Endorsement submissions should explain the overseas rating entity, group relationships, objective reasons for issuing ratings overseas, the UK entity’s ongoing verification capability and information access arrangements. The two sets of requirements are not interchangeable.[2] [5] [6] [24]

This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.

• First, determine the activity perimeter and customer use: analyse whether credit opinions expressed using a ranking system are issued, whether they are distributed publicly or by subscription, and whether they are intended for UK regulatory use. Distinguish purely statistical scores, strictly private ratings and general data analysis from professional CRA ratings, and confirm whether any other activities requiring separate permission are also undertaken.[1] [3] [4]

• Step two: select local registration, third-country certification or group endorsement, and request a pre-application meeting with PASS. Third-country institutions should first verify the certification equivalence list and the non-systemic importance conditions. Endorsement by a UK group must satisfy Article 4(3) and include the capacity for ongoing oversight of, and responsibility for, overseas ratings.[2] [5] [6] [24]

• Third, establish actual governance, rating and control mechanisms before finalising the documents. The application should demonstrate operational readiness in director independence, separation of analytical and commercial functions, methodology review, ongoing monitoring and database capabilities. Recruitment or procurement of core rating systems should not be left until after approval.[2] [7] [9]

• Step four: submit the dedicated CRA form and supporting information in English, and pay the relevant application fee, using the method confirmed by the FCA team. The general FCA fees page mentions payment through Connect, but the CRA application page requires dedicated registration or certification forms. Completing an ordinary online authorisation form and paying successfully therefore cannot be treated as acceptance of a complete CRA application. Retain submitted versions, payment records and regulatory receipt and enquiry records.[2] [15] [16]

• Step five: FCA checks application completeness within 20 working days. If incomplete, it sets a deadline for supplementary information; each item must be answered and gaps in quantity and content quality addressed. Following confirmation of completeness, the 45-working-day decision stage begins, which may be extended by 15 working days under specified conditions. Connection to the ratings database must also be completed under the arrangements provided by FCA.[2] [16] [17]

• Step six: after receiving a registration or certification decision, check its effective date and the Financial Services Register information before operating within the permitted scope. Article 16 provides that a decision takes effect on the fifth working day after it is made. If FCA proposes refusal, it will explain the issues through the relevant notice and decision procedures. Applicants should not promise guaranteed approval or substitute a consultant's success rate for statutory assessment.[2] [17]

Completeness and incomplete applications: Article 15(4) requires FCA to assess completeness within 20 working days of receiving an application; if incomplete, FCA sets a deadline for submitting additional information. The 20 working days are not a guaranteed timeframe for completing all approvals, nor may the supplementary information stage be described as a fixed 6-month or 12-month approval period for incomplete CRA applications. The verified CRA provisions do not provide a uniform maximum 12-month period for incomplete applications comparable to general FSMA authorisation.[2] [16]

Decision on a complete application: in principle, a decision to register or refuse must be made within 45 working days of FCA issuing the completeness notification; particularly where endorsement of overseas ratings, outsourcing or an exemption under Article 6(3) is proposed, this may be extended by 15 working days to 60 working days. Third-country certification follows the Article 16 procedure through Article 5(3); the decision takes effect on the fifth working day after it is made. FCA also expressly requires connection to its ratings database before the decision, so completeness, decision, effectiveness and technical go-live must be managed separately.[2] [6] [17]

Preparation: organisational establishment, director recruitment, methodology backtesting, system development and communication with PASS have no uniform statutory preparation period. In a project budget prepared by Tang Shangyong (Mr Tang) of Rengang Yongsheng (Hong Kong) Limited, a new institution may allow several months, with complex groups or validation of new methodologies potentially taking longer. This is only work planning, not an official average approval time from FCA or a promise of success. The original page's 3–6 months / 6–12 months and associated stage estimates cannot be applied directly to CRA statutory periods.[2] [9]

Shareholders and control structure: CRAs must continue to meet the initial registration conditions. Material changes in shareholdings, voting rights, parent companies or control arrangements must be notified to FCA without undue delay under Article 14(3). Before a transaction, assess the 5% cross-CRA investment restrictions, significant influence, and the 5% and 10% conflict-of-interest mechanisms concerning rated entities; consult the CRA supervisory team in advance where necessary. It cannot simply be asserted that every crossing of the 10%, 20%, 33% or 50% thresholds in a CRA-only firm invariably requires prior controller approval under section 178 of FSMA; if the target also holds FSMA authorisation, that approval regime must be checked separately.[7] [8] [12] [21]

Directors and senior management: the dedicated FCA change form includes notifications of incoming and departing senior executives. New appointees must provide a curriculum vitae and criminal record check. The proportion of independent directors, securitisation experience, compliance and methodology review functions should be reviewed at the same time, rather than merely filing director changes with Companies House. This notification for a pure CRA must not be described as necessarily using SMF Form A or departure Form C. Specific documentation is governed by the dedicated CRA notification and the supervisory team’s requirements.[2] [7] [25]

Methodologies, categories and exit: adding a rating asset class requires a dedicated notification to FCA explaining the updated methodologies and the experience of analysts and senior managers. Material or new methodologies should undergo public consultation for one month, with simultaneous notification to FCA and notification of the final changes after consultation. Before withdrawal of registration, inform the CRA supervisory team of the number of outstanding ratings, the impact on users and transition arrangements, and settle reporting, fees and applicable outstanding matters. The business or registration status cannot be detached from the original legal entity and treated as a separately transferable commodity.[2] [8] [10] [25]

Current CRA should monitor credit-related ESG risks and record their impact on ratings in accordance with the review requirements for 2026. Institutions proposing to provide standalone ESG ratings should prepare for the corresponding admission requirements ahead of the future application window and effective date. Today’s CRA registration and general ESG information provision cannot substitute for each other.[23] [31] [32]

Registration status and transaction structure: due diligence should first verify the legal entity, the nature of registration or certification, the actual rating categories, exemptions and regulatory restrictions in the Financial Services Register, and obtain correspondence with FCA, inspection records, error reports and remediation documents. A share acquisition usually retains the same legal entity, but an asset transfer, transfer to a new legal entity or merger may require new admission arrangements; registration is not a standalone licence that can be sold separately from the original institution. Completion documents should make material-change notifications and business continuity conditions, rather than applying a supposed uniform three-month CRA change-in-control approval period.[2] [8] [25]

Shareholder conflicts and rating independence: look through the buyer’s funds, parent companies and common controllers, checking investments of at least 5% in other CRA and director appointment and removal arrangements. If the buyer also holds an interest in a rated issuer, sits on its board or provides restructuring finance advice, this may trigger 5% disclosure, a 10% prohibition on issuing ratings or other connected-rating restrictions, and require existing ratings to be assessed or withdrawn. Sample-check the largest issuer-paying clients, disclosures for clients accounting for more than 5% of annual revenue, whether rating fees are tied to outcomes, and whether ancillary business disguises the sale of advice on improving ratings.[7] [9] [12]

Methodologies, legacy liabilities and system assets: sample-check working papers for initial assessments and annual reassessments, six-monthly sovereign reviews, committee membership, model backtesting, methodological deviations, error identification and the timing of notifications to FCA. Confirm access to at least five years of non-public information, database access and rating histories, and that group-shared IT, data licences and methodological intellectual property remain usable after completion. Acquiring only client contracts and trademarks while losing model licences, analytical teams or historical records may prevent outstanding ratings from continuing to comply with the Regulation.[7] [10] [22] [23]

Overseas operations and business sustainability: firms using endorsement should verify each overseas rating entity's group relationship, framework eligibility, access to information and assumption of responsibility in the UK; certification targets require reassessment of post-transaction systemic importance and third-country eligibility. Calculate analyst and independent control resources based on the existing ratings monitoring workload, and check retention of key directors, exemption conditions, the impact of crossing turnover-based fee thresholds and exit plans. An exemption for fewer than 50 people, an annual fee exemption or an adviser's claimed 100% success rate must not substitute for compliance due diligence.[2] [5] [6] [11] [28]

The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.

Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.

Information compiled by: RenGang Yongsheng (Hong Kong) Limited

Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services

Contact the author and enquire about projects