The annual coverholder review is the central control most Lloyd's managing agents rely on. It is also the control that fails most often. Not in a way that produces an enforcement letter the day after the binder is signed, but in a quieter, structural way. The file is built. The signoff happens. A quarter goes by, then two, and the operating picture has moved underneath the file.

Lloyd's knows this. The Market Oversight Plan 2026 (13 January 2026) signals the shift. The LMA Coverholder Audit Scope and Associated Guidance (22 October 2025) signals the same thing from the audit side. The FCA's inactive AR review (21 April 2026) found that only 43 percent of principal annual reviews were of good quality. The Lloyd's equivalent statistic is not in the public domain, but every Head of Delegated Authority I have spoken with this year reports the same internal failure pattern.

This piece covers three things:

1. Why the annual review is the wrong unit of control.

2. What Lloyd's is now asking for under Principles-Based Oversight.

3. What continuous oversight means in practice.

1. The annual review is the wrong unit of control

Conventional coverholder oversight involves deep reviews, refreshed once a year or every 6 months. The Head of Delegated Authority pulls evidence from emails, broker confirmations, attestations, and an internal note. Roughly 40 percent of the review window goes on assembly, not analysis. Between reviews, a RAG dashboard carries the picture.

The Market Oversight Plan 2026, published on 13 January 2026, sets a continuous evidence base as the operating frame. The LMA Coverholder Audit Scope and Associated Guidance, refreshed on 22 October 2025, widens audit beyond attestation review into operational testing. The bordereaux v5.2 reporting standard goes further. All building a continuous monitoring expectation rather than the current snapshot approach.

Common shortcomings of the current approach include the annual file going stale within a quarter of signoff, with the next review picking up the discrepancy nine months late. Attestation gets treated as evidence the control operated, supported by "verbal" confirmations. The RAG colour is a lagging signal dressed as a leading one. By the time a coverholder turns red, the underlying issue has been live for two reporting cycles.

2. Principles-Based Oversight changes the evidence base, not the cadence

Most managing agents still run a granular checklist for both internal review and audit. Oversight is structured per binder, so a coverholder with three binders gets three workflows while they may be performing the same control across three binders. The annual review sits at the top of the supervisory cycle. Everything else feeds into it or follows from it.

Principles-Based Oversight, introduced through 2024 and 2025, replaces the checklist with a smaller set of principles. The managing agent now has to evidence intent, not just rule-following. Every managing agent also has a named DA Oversight Manager at Lloyd's, forming a continuous view from bordereaux, complaints MI, audit reports, and broker feedback. The direction of travel is judgement and standing evidence, not a longer checklist.

Where this trips most functions up is the question itself. Lloyd's now asks "show me the operating picture this quarter, and the one before," and most cannot answer without retrospective assembly. Per-binder workflows fragment the coverholder view, so control failures that span binders stay invisible until the audit.

3. The operating shift: from event to operating layer

Today, oversight is run as an event. The annual review is the moment the view gets constructed for Lloyd's and for the internal committee. Bordereaux are treated as a data feed problem rather than a control-health signal. Indicators sit in separate spreadsheets from the controls they are meant to monitor.

The supervisory direction points to a live view of every coverholder, every binder, every control, and every indicator. The annual review becomes the moment that view gets formalised for Lloyd's, not the moment it gets built. Oversight stops being an event the function prepares for, and starts being an operating layer the function runs from.

The traps in the current shift are subtle. Moving from annual to monthly monitoring is a calendar change, not an operating one, and the underlying problem stays. Without controls mapped first, indicators float free, reporting movement but not telling the Head of Delegated Authority which control is degrading. Heroic retrospective assembly each quarter burns the same hours the annual review already burns, and it is not sustainable past two cycles.

The solution: continuous oversight as an operating layer

The shift is from oversight as an event to oversight as the operating layer underneath the function. Controls are mapped first. Indicators, actions, and the risk picture sit downstream of the controls. Each pitfall above maps to a specific mechanism.

• The Controls-First Approach addresses stale file, attestation as evidence, RAG as control; calendar-only change, floating indicators, heroic quarterly cuts. Controls get mapped first, then indicators attach to those controls. Bordereaux updates, complaints, and audit findings surface against the relevant control, giving an operational first view of the coverholder.

• The Parent-Child module addresses the retrospective assembly, fragmented per-binder workflows and tier drift. Coverholder, binder, and control sit in one hierarchy, so oversight aggregates upward into a single picture instead of three workflows joined by spreadsheets.

Together, this is the operating layer for delegated authority. The annual review still happens. It just stops being the moment the picture gets built. It becomes a formal cut of a picture that is already live.

Next step

This week, pick one coverholder and map its controls per coverholder, not per binder. Identify the three controls where current evidence depends on attestation. That single exercise is the smallest credible test of whether continuous oversight is workable in your function.

If it is useful, learn more about our approach to Lloyd's coverholder oversight or get in touch if you want to see how it works in a delegated authority setting.