FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank tracks a critical outsourced service with quarterly incident counts. Over four quarters, incidents were 4, 6, 9 and 13. The bank's risk appetite trigger for escalation to the board is either an incident count above 12 in a quarter or a quarter-on-quarter increase above 40% for two consecutive quarters. Which statement is correct?
Both triggers were breached. Quarterly growth was 50%, 50% and about 44%, all above 40% for consecutive quarters, and Q4's count of 13 exceeds the limit of 12. The matter should therefore be escalated to the board under the stated risk appetite.
- AOnly the count trigger was breached, in Q4
- BOnly the growth trigger was breached, in Q3 and Q4
- CBoth triggers were breachedCorrect
- DNeither trigger was breached
Explanation
Growth: Q2 = 6/4-1 = 50%; Q3 = 9/6-1 = 50%; Q4 = 13/9-1 = 44.4%. All exceed 40%, so the growth trigger is breached for consecutive quarters (indeed Q2-Q4). The count of 13 exceeds 12 in Q4. Hence both are breached; option 2 ignores Q2 and the count.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank relies on five critical outsourced services. Four are supplied by Vendor A, and Vendor A hosts its systems with a cloud provider that…
- A bank is negotiating a contract with a cloud service provider to host a critical payments application. Which contractual provision most dir…
- A bank's outsourcing register shows 40 material arrangements. Senior management reports to the board that all 40 have signed contracts, but …
- Several banks in a jurisdiction each use the same cloud provider for core processing, though each bank individually has only moderate depend…
- A bank outsources its loan servicing to a provider that in turn subcontracts collections to a third party. Which expectation of senior manag…
- A bank rates its outsourced activities by criticality. Its card-authorization service (provider A) would cause severe customer and regulator…