FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank assesses its outsourcing portfolio and finds that 70% of its critical outsourced services are supplied by one provider, which is also hard to substitute. Which response best addresses this concentration while remaining practical?
The best response is to diversify where feasible, set concentration limits or monitoring triggers, and strengthen exit and contingency plans. Good past service does not remove single-provider risk, while abrupt termination or deeper reliance would either cause disruption or increase the concentration.
- ADo nothing since the provider has met all service levels
- BTerminate all contracts immediately regardless of disruption
- CDiversify where feasible, set concentration limits or monitoring triggers, and strengthen exit and contingency plansCorrect
- DIncrease the provider's share to negotiate lower prices
Explanation
Sensible management combines measuring concentration, setting limits or triggers, diversifying where feasible and strengthening exit planning. Past service levels do not remove the single-point risk, abrupt termination creates operational risk, and increasing share worsens concentration.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- Which description best captures outsourcing risk as a category of operational risk for a financial institution?
- Meridian Bank is evaluating two vendors for a critical payments-processing service. Which action best reflects sound due diligence BEFORE se…
- Which element is MOST appropriate to include in a written contract with a provider of a critical outsourced service?
- Before approving an outsourcing arrangement for a material activity, which action best reflects a risk-based approach under the supervisory …
- A regional bank plans to outsource its loan-servicing platform to a third-party provider. According to the supervisory guidance on managing …
- A regional bank outsources its payment processing to a single vendor. The board asks which document should be in place so that, if the vendo…