FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank tests the business continuity plan for an outsourced customer call centre. Which test most directly demonstrates that the bank can sustain the service if the vendor's primary site becomes unavailable?
A joint failover test with the vendor, measuring actual recovery time against the agreed objective, is best. It gives real evidence that the service can continue, whereas contract clauses, emails or price comparisons only assert capability without demonstrating it.
- AA joint test with the vendor that actually fails over to the backup site and measures recovery time against the agreed objectiveCorrect
- BReviewing the vendor's signed contract for a continuity clause
- CAsking the vendor to confirm by email that a plan exists
- DComparing the vendor's price to competitors
Explanation
Guidance expects banks to confirm that vendor continuity arrangements are tested and consistent with the bank's own recovery objectives. A joint failover test produces evidence of actual recovery time. A clause, an email or a price comparison gives no evidence of capability.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- Which of the following best defines outsourcing in the context of supervisory guidance on managing outsourcing risk?
- A bank outsources its customer data hosting to a cloud provider that in turn relies on a subcontractor in another jurisdiction. The bank's r…
- The board of a bank asks whether its outsourcing risk appetite is properly reflected in practice. Which of the following would be the strong…
- A risk manager reviews why the bank's outsourcing has grown over five years. Which of the following is a commonly cited driver of outsourcin…
- A bank's contract with a cloud provider sets a monthly availability SLA of 99.9% over a 30-day month (720 hours). Monitoring reports show th…
- A bank plans to outsource its payment-processing operations to a third-party provider. Which statement best describes the bank's responsibil…