FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank is assessing an exit from a critical outsourced service. Which finding would most strongly indicate that the exit strategy is not credible?
An exit strategy is not credible when it exists only on paper: no alternative provider is identified, data is locked in proprietary formats, and the transition has never been tested. Such gaps mean the bank could not actually execute an orderly exit under stress.
- AThe contract contains termination rights and data return clauses
- BThe bank holds documentation of the service's processes and data formats
- CExit has been described in policy but no alternative provider has been identified, data is in a proprietary format, and the transition has never been testedCorrect
- DThe bank reviews the provider's financial condition annually
Explanation
A credible exit requires feasible alternatives, portable data and tested transition steps. Having only a policy statement, no alternative provider, proprietary data formats and no testing means exit could not be executed in practice. The other options are supportive controls.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank relies on five critical outsourced services. Four are supplied by Vendor A, and Vendor A hosts its systems with a cloud provider that…
- A bank is negotiating a contract with a cloud service provider to host a critical payments application. Which contractual provision most dir…
- A bank's outsourcing register shows 40 material arrangements. Senior management reports to the board that all 40 have signed contracts, but …
- Several banks in a jurisdiction each use the same cloud provider for core processing, though each bank individually has only moderate depend…
- A bank outsources its loan servicing to a provider that in turn subcontracts collections to a third party. Which expectation of senior manag…
- A bank rates its outsourced activities by criticality. Its card-authorization service (provider A) would cause severe customer and regulator…