FRM Part II · FRM Exam Part II · Case Study: Third-party Risk Management
A bank's outsourced call-centre vendor has an SLA requiring 99.5% availability over a 30-day month (720 hours). In the month, the vendor recorded 5.4 hours of downtime. Which statement is correct?
Availability was 99.25%, below the 99.5% target, so the SLA was breached. Allowed downtime is 3.6 hours (0.5% of 720), and actual downtime of 5.4 hours equals 0.75% of the month, leaving 99.25% availability.
- AAvailability was about 99.25%, so the SLA was breached
- BAvailability was 99.75%, so the SLA was metCorrect
- CAvailability was 99.25%, so the SLA was met
- DAvailability was 99.75%, so the SLA was breached
Explanation
Allowed downtime at 99.5% is 0.5% x 720 = 3.6 hours. Actual downtime of 5.4 hours gives availability of 1 - 5.4/720 = 1 - 0.0075 = 99.25%. That is below 99.5%, so the SLA was breached. Hence the first option is wrong in label order; check carefully: 99.25% with breach is the first option.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Third-party Risk Management shows your real accuracy, how long you take and where you lose marks.
More Case Study: Third-party Risk Management questions
- A mid-sized bank relies on a single cloud provider to host its payment processing platform. The provider suffers a multi-day outage, and the…
- A bank discovers that its critical vendor outsources part of the service to a subcontractor, which then fails. The bank had only assessed th…
- A bank wants to reduce the risk that a single cloud provider outage disrupts a critical service with a short impact tolerance. Which action …
- A bank's cloud vendor contract states that the vendor is responsible for the security of the cloud infrastructure, while the bank configures…
- A bank has five critical services. Service dependency mapping shows: Provider A supports 3 services, Provider B supports 2 services, and Pro…
- A bank is onboarding a cloud analytics vendor that will process confidential customer data and whose failure would halt daily risk reporting…