FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A bank's outsourcing risk management program classifies its service providers into tiers. Which feature most appropriately determines whether a provider is placed in the highest-risk (critical) tier?
A provider belongs in the critical tier based on the potential impact of its failure or poor performance on the bank's operations, customers, finances and regulatory compliance. Fee size, relationship length or location do not define criticality, though they may inform the overall risk assessment.
- AThe annual fee paid to the provider
- BThe number of years the provider has served the bank
- CThe potential impact on the bank's operations, customers and compliance if the provider failed or performed poorlyCorrect
- DWhether the provider is located in the same country as the bank
Explanation
Criticality is driven by potential impact of failure on operations, customers, finances and regulatory compliance. Fees, tenure and location may be inputs but are not the defining measure of criticality.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank outsources its payment processing to a single vendor. The board asks which document should primarily define how the bank would move t…
- A bank relies on an outsourced data-center provider for a critical trading platform. The bank's business impact analysis sets a maximum tole…
- A bank outsources 60% of a critical function to Provider A and 40% to Provider B. Both providers use the same cloud infrastructure vendor, w…
- A bank outsources a critical function to a provider that itself relies on a subcontractor (a fourth party). Which action best addresses the …
- A bank's risk committee reviews its critical outsourcing arrangements. A provider's monthly reports show all KPIs green, but the bank has ne…
- A bank's vendor risk team reviews a critical cloud provider. Monthly service level reports show 99.95% availability against a 99.9% target, …