FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A mid-sized bank plans to outsource its loan-servicing platform to a third-party provider. Under the Federal Reserve's guidance on managing outsourcing risk, which statement best describes the board of directors' and senior management's responsibility?
The board and senior management stay fully responsible for an outsourced activity as if the bank performed it internally. Contracting with a provider does not transfer accountability, so they must ensure a proper risk management program and oversight are in place for the arrangement.
- AResponsibility for the outsourced activity transfers to the service provider once a contract is signed
- BThe board and senior management remain responsible for the outsourced activity as if the bank performed it itself, and must ensure appropriate risk management oversightCorrect
- CResponsibility is limited to approving the budget, while operational staff handle all risk assessment
- DResponsibility applies only to outsourcing arrangements that involve foreign service providers
Explanation
The guidance stresses that outsourcing does not reduce the bank's responsibility for safe and sound operation and compliance with laws. The board and senior management must ensure the activity is overseen with a risk management program. The claim that responsibility transfers to the provider is the key misconception.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank outsources its loan servicing to a provider that in turn subcontracts collections to a third party. Which expectation of senior manag…
- A bank rates its outsourced activities by criticality. Its card-authorization service (provider A) would cause severe customer and regulator…
- A bank assesses its outsourcing portfolio and finds that 70% of its critical outsourced services are supplied by one provider, which is also…
- A bank outsources five critical functions. Provider A performs three of them and Provider B performs two. Provider A's cloud platform also h…
- A risk manager designs management reporting on a bank's critical outsourcing arrangements for the board. Which approach is most consistent w…
- A bank's board is reviewing its outsourcing framework. Which of the following is most appropriately a board-level responsibility rather than…