The regime separates roles needing prior Central Bank approval (PCFs) from senior roles the firm assesses itself (CFs), and tests everyone in scope against three standards: competence and capability, honesty and integrity, and financial soundness. Study by classifying functions, not titles, and by building a distinct evidence trail for each standard rather than one generic personnel file.
The Approval Boundary: PCF Roles, CF Roles and Everything Else
PCF roles are prescribed in Central Bank regulations and require approval before the person acts. CF roles are senior positions the firm itself must assess and document. The regime's first skill is placing a given function into the correct category before any appointment proceeds.
Prescribed controlled functions are named in regulations made under the regime's founding legislation: typically the chief executive, heads of compliance, risk, internal audit and finance, certain heads of function within business lines, and specified non-executive roles including the chair. The trigger is performing the function, not signing a contract, so a person cannot lawfully act in a PCF role until the Central Bank has approved them for it.
Controlled functions are the second tier: senior managers, heads of significant business units and other key roles that are not individually prescribed. Here the firm carries out and records its own fitness and probity assessment before the person acts, using the same standards but without submitting an application. A third category matters too: ordinary roles fall outside the regime altogether, and knowing that boundary prevents unnecessary vetting and misplaced applications.
| Feature | PCF role | CF role | Outside the regime |
|---|---|---|---|
| Who assesses | Central Bank of Ireland | The regulated firm itself | Nobody under this regime |
| Timing | Approval required before the person acts | Firm assessment before the person acts | Not applicable |
| Documentation | Individual questionnaire and application via the firm | Firm's internal assessment file | None required |
| Typical examples | Chief executive, head of compliance, head of risk, chair | Heads of significant business units, other senior managers | General staff roles with no control responsibility |
| Ongoing duty | Firm confirms continued compliance periodically | Firm reassesses if circumstances change | Not applicable |
The Three Standards and Why Each Needs Different Evidence
The regime rests on three standards: competence and capability; honesty, integrity and ethical behaviour; and financial soundness. Each standard is demonstrated through different evidence, so a strong file separates them rather than merging everything into a single undifferentiated record.
Competence and capability are shown through qualifications, the relevance and depth of experience, and knowledge proportionate to the role's responsibilities. A head of internal audit needs evidence of audit and control expertise; a non-executive director needs evidence of board-level judgement. Gather evidence that maps to the specific function: a qualification unrelated to the role supports little, while a documented track record in an equivalent function supports a great deal.
Integrity is evidenced by the absence or handling of convictions, regulatory findings, disqualifications and serious disciplinary history. Financial soundness is evidenced by bankruptcy, insolvency, or unpaid judgments. Note the overlap: a single past insolvency is simultaneously integrity evidence and financial-soundness evidence, so record it once but assess it under both headings. When you review a file, ask which paragraph of evidence answers which standard; a gap in any one standard means the assessment is incomplete.
Scenario 1: An Internal Promotion Into a Head of Risk Role
Classification errors most often appear at reorganisations, when an existing employee takes on a prescribed function. The mistake is assuming that an internal appointment or partial portfolio transfer avoids the approval requirement. Walk through the decision and its correction.
A mid-sized firm restructures and asks its existing head of treasury to take on the head of risk portfolio alongside her current duties. HR treats this as an internal change requiring no filing, arguing she is already employed and vetted. That reasoning confuses employment status with the regime's trigger: the question is whether she is now performing a prescribed function, not whether she is a new hire. Acting in the role without approval would leave both the firm and the individual exposed to regulatory consequences.
The better decision is to classify the function before the effective date. Compare the responsibilities against the prescribed role list; a head of risk is a prescribed PCF, so the firm submits an individual questionnaire and application, and she does not perform the risk function until approval is granted. If a temporary acting arrangement is genuinely needed in the interim, the firm should check the Central Bank's current guidance on temporary cover rather than assume the internal promotion route is a workaround.
Evidence Packs: What an Individual Questionnaire Must Contain
A PCF application is built on an individual questionnaire covering identity, career history, qualifications, convictions, regulatory findings, financial standing and references, together with the firm's own reasoned assessment. CF files should contain the same categories of information, collected internally.
For PCF applications the firm assembles the questionnaire through the Central Bank's online reporting channel, and the quality marker is internal consistency: dates in the questionnaire must match the contract, the references must corroborate the stated history, and the firm's assessment must explain why the evidence satisfies each standard. A file that merely collects signatures without a reasoned conclusion is weak, because the assessment, not the form-filling, is the firm's regulatory contribution.
Apply the same discipline to CF roles, even though nothing is submitted. The firm's internal file should be complete enough that its reasoning could be reconstructed years later: what information was gathered, what was weighed, and why the conclusion was reached. Practise by taking a CV and drafting the evidence categories you would request, then check whether each of the three standards has at least one independent item of evidence behind it. Missing categories are exactly what a review will probe.
Scenario 2: Disclosing an Old Regulatory Finding
Past findings do not automatically disqualify a candidate, but concealment does. The judgement being tested is candour: a full disclosure with context supports the honesty standard, while a discovered omission is itself a breach regardless of the underlying event.
A candidate for a prescribed non-executive director role held a senior position at another firm years earlier, where a compliance failure occurred and a regulatory finding followed. He considers the matter too old to mention and answers the questionnaire's disclosure question vaguely. The firm's reviewer notices a gap between the dates given and a reference's dates. The better decision was full disclosure: the dates, the finding, what remediation occurred, and what he learned.
Why the difference matters: the Central Bank evaluates candour as part of the honesty and integrity standard, so an omission converts a manageable historical issue into a current integrity problem, potentially leading to a prohibition or disqualification. The firm, meanwhile, must reach and document a reasoned view on whether the underlying issue affects fitness for the proposed role. Age, relevance, severity and remediation are the weighing factors, and the written judgement is what demonstrates the firm's assessment was genuinely performed.
After Approval: Confirmations, Changes and Prohibition
Fitness and probity is continuous, not a one-off gate. Firms confirm periodically that PCFs remain compliant, must respond when a PCF leaves or no longer complies, and face enforcement tools up to prohibition where the standards are breached.
Once a person is approved, the obligation does not end. Firms submit periodic confirmations through the Central Bank's online reporting channel that prescribed function holders continue to meet the standards, and they must handle transitions correctly when a PCF resigns, changes role, or circumstances arise that cast doubt on continued compliance. Treat the confirmation cycle as a live register: the firm should always know who currently performs each prescribed function and on what evidential basis.
On the enforcement side, the Central Bank can inquire into whether a person has breached the standards and can issue prohibition notices barring individuals from PCF and CF roles in regulated financial services providers. The Central Bank published supplemental guidance on prohibition notices in July 2026, which is worth reading directly for how the Bank explains its approach. When studying enforcement, distinguish the instruments: a prohibition prevents future performance of controlled functions, while disqualification prevents holding prescribed positions, and each follows its own process.
Classification Drill, Self-Check Rubric and a Preparation Sequence
Practise with a mock organisation chart containing three invented senior roles. For each, decide PCF, CF or neither, name the assessor, and list the evidence you would request per standard. Score your reasoning against the rubric before moving to timed practice.
Set up the drill: invent a firm with a head of compliance, a head of a significant business line, and a head of marketing. Expected observations: the head of compliance is a prescribed PCF requiring prior Central Bank approval via an individual questionnaire; the business-line head is a CF requiring the firm's documented internal assessment; the marketing head is outside the regime unless genuine control responsibilities are attached. The key learning point is that responsibilities, not titles, drive the classification, so rewrite one role's mandate to add control duties and redo the analysis.
For preparation sequencing, spend the first stretch on the framework: the founding legislation, the prescribed role lists, and the PCF/CF boundary. Next, map the three standards to concrete evidence types using the table above. Then work scenarios: draft a disclosure response for the Scenario 2 candidate and a classification memo for a restructuring like Scenario 1. Finish with ongoing duties, enforcement instruments, and mixed timed drills where you classify and evidence-plan unfamiliar roles from scratch.
Score each drill role against the rubric below as you go; treat the milestones as learning checkpoints only, not as any prediction of exam outcomes.
- Classification: correct PCF/CF/neither call, justified by the function performed rather than the job title.
- Assessor: correctly named the Central Bank or the firm, and stated when the assessment must occur.
- Evidence mapping: at least one distinct evidence item per standard, with overlaps flagged.
- Disclosure judgement: identified what must be disclosed and how candour is assessed.
- Ongoing duties: stated who confirms continued compliance, through what channel, and when reassessment is triggered.
References and further reading
Use these references to explore the concepts and check the latest information from the relevant organizations.