What is SM&CR?
SM&CR, the Senior Managers and Certification Regime, is a UK regulatory framework that allocates clear accountability to senior individuals and requires certain staff to be fit and proper for their roles. It is significant for AI governance because firms must be able to show who is responsible for decisions, controls, and escalation when AI affects regulated activities or customer outcomes.
In Depth
In practice, SM&CR requires firms to define ownership for AI strategy, model risk, third-party tools, control testing, incidents, and remediation so that accountability does not disappear into technical teams or vendors. Compliance teams should map AI use cases to senior manager responsibilities, maintain statements of responsibility where relevant, and ensure certification, conduct, and training controls cover staff involved in AI development, deployment, and oversight.
The regime matters because AI can amplify accountability gaps: if a model causes harm, regulators will expect firms to identify who approved the use case, who monitored it, and who had authority to stop it. SM&CR is a UK-specific framework, but it also supports broader governance expectations found in financial-services regulation, operational resilience programs, and AI management system standards.
Related Frameworks
Related Topics
Related Terms
Weekly digest
Leave your email to get each issue in your inbox. Free, no account required.
We use your email only for the digest. Privacy policy