FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank plans to outsource its payment-processing operations to a third-party provider. Which statement best describes the bank's responsibility for the outsourced activity once the contract is signed?
The bank's board and senior management remain ultimately responsible for the outsourced activity. Outsourcing moves the performance of the task to the provider, not accountability. Contract liability clauses may allocate financial losses, but regulators still hold the bank responsible for managing the risks and for compliance.
- AThe bank's board and senior management remain ultimately responsible for the outsourced activity and its risksCorrect
- BResponsibility transfers to the service provider as specified in the contract's liability clause
- CResponsibility is shared equally between the bank and the provider, with the regulator arbitrating disputes
- DThe bank is responsible only for risks arising before the date the service is transferred
Explanation
Under supervisory guidance on outsourcing, a firm can transfer the performance of an activity but not accountability for it. The board and senior management stay responsible for risk management, compliance and customer outcomes. Contractual liability clauses allocate financial recovery between the parties but do not remove regulatory accountability.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank's risk team reviews its critical outsourced services. Five critical services are provided by vendors: Vendor A supplies 3 services, V…
- Which description best captures outsourcing risk as a category of operational risk for a financial institution?
- Meridian Bank is evaluating two vendors for a critical payments-processing service. Which action best reflects sound due diligence BEFORE se…
- Which element is MOST appropriate to include in a written contract with a provider of a critical outsourced service?
- Before approving an outsourcing arrangement for a material activity, which action best reflects a risk-based approach under the supervisory …
- A regional bank plans to outsource its loan-servicing platform to a third-party provider. According to the supervisory guidance on managing …