When a licensed firm undergoes a capital adequacy assessment, the starting point is its prior year financials. Actual revenue, actual costs, actual capital position. The numbers are there, and the assessment is grounded in reality.

A new CIF has none of that. There are no prior year financials, no audited accounts, no track record of income or expenditure. CySEC’s capital adequacy assessment for a firm in its first year of operation is based entirely on projections. And those projections come from one place: the business plan.

This is the third and final reason why the business plan is the most consequential document in the entire licensing process, and why it should have existed as a genuine planning tool long before the application was assembled.

What capital adequacy actually requires

Under the Investment Firms Regulation (EU) 2019/2033, a CIF must hold own funds equal to the higher of three measures: its permanent minimum capital requirement (€75,000 for a firm not holding client funds), its fixed overhead requirement, or its K-factor requirement. For a pure external asset manager operating without custody, the K-factor requirement is typically modest. The fixed overhead requirement, however, is directly derived from operating costs.

The fixed overhead requirement is calculated as one quarter of the firm’s total annual fixed expenditure from the preceding year. For a new firm with no preceding year, CySEC applies the projected fixed expenditure from the business plan. One quarter of your projected annual fixed costs becomes your fixed overhead capital requirement, on top of the €75,000 minimum.

To illustrate: a firm projecting €240,000 in fixed annual costs faces a fixed overhead requirement of €60,000. Added to the €75,000 minimum, the total regulatory capital floor becomes €135,000, before accounting for the working capital needed to actually fund those costs.

The expense architecture problem

This is where precision in the business plan pays dividends that most applicants do not anticipate.

Fixed costs and variable costs are not treated equally in the capital adequacy calculation. Only fixed expenditure feeds the fixed overhead requirement. A firm that has thought carefully about its cost structure, identifying which costs are genuinely fixed and which are variable, contingent, or one-off, can present a business plan that is both operationally realistic and capital-efficient.

This is not an invitation to misclassify costs. CySEC’s authorisation team understands cost structures, and a business plan that implausibly categorises staff costs or technology expenditure as variable will invite scrutiny. But there is genuine room for precision here. Project costs, setup costs, one-off professional fees, and performance-linked remuneration are legitimately variable, and treating them as such in the plan is both accurate and appropriate.

The firms that enter the capital adequacy assessment with a well-structured expense breakdown, one that has been built bottom-up, stress-tested, and categorised correctly, face fewer questions and require less capital than firms that have assembled their cost projections loosely.

The balance the business plan must strike

The ideal Year 1 business plan for a CIF applicant holds two things in tension simultaneously: it must be realistic enough to be credible to CySEC, and disciplined enough on the cost side to avoid generating a capital requirement larger than the business genuinely needs.

Realism means the revenue projections are grounded in an actual client pipeline, not aspirational assumptions. It means the headcount reflects the genuine operational needs of the firm, not the minimum required to satisfy the governance checklist. It means the plan can be defended in a conversation with a CySEC examiner who has read hundreds of business plans and knows what a credible one looks like.

Discipline on the cost side means that every line item has been interrogated. It means setup costs have been separated from running costs. It means outsourced functions have been costed accurately, with the understanding that they may eventually need to move in-house as the firm grows. It means the plan reflects what the business actually needs to operate well, not what it might spend if budget were no constraint.

That balance is not difficult to achieve. It requires the same rigour that any well-run business would apply to its financial planning, which returns to the central point of this series. A business plan built to run a business will naturally strike that balance. A business plan built to satisfy a regulator rarely will.

Closing the series

Across these three articles, the same observation has surfaced in different forms. The capital requirement is determined by the business plan. The governance obligations are determined by the business plan. The capital adequacy assessment is determined by the business plan. In each case, the firms that approach the process most successfully are the ones for whom the business plan already existed, as a genuine expression of how they intended to build and run an asset management business, before the licensing process began.

CySEC’s requirements are rigorous, but they are not arbitrary. They are designed to ensure that only firms capable of operating responsibly receive authorisation. A firm that has done the planning work already will find that the licensing process largely confirms what it already knows about itself. A firm that has not will find that it reveals what it should have known before it started.

The licence is the beginning. The planning is what comes first.