The UK's largest financial insitutions have "highly resilient" IT systems that could recover critical functions quickly after a terrorist attack or natural disaster, but firms could still be at risk because too many back-up sites are located in London, says the Financial Services Authority.