The UK has begun direct oversight of systemic cloud services used by financial firms, while banks remain responsible for their own operational resilience, contracts, and recovery planning.