FRM Part II · FRM Exam Part II · Guidance on Managing Outsourcing Risk
A risk manager reviews why the bank's outsourcing has grown over five years. Which of the following is a commonly cited driver of outsourcing, and also a reason that it can increase risk if poorly managed?
Access to specialised expertise and technology is a typical driver of outsourcing, alongside cost and scalability. If it leads the institution to depend on a few providers, it creates concentration and dependence risk, so it must be managed rather than assumed to remove risk.
- AAccess to specialised expertise and technology, which can create dependence on a few providersCorrect
- BElimination of regulatory reporting duties, which weakens supervisory oversight
- CGuaranteed removal of operational risk, which leads to lower monitoring
- DAutomatic transfer of legal liability to the provider, which reduces contract review
Explanation
Cost savings, specialised expertise, scalability and technology access are typical drivers. Reliance on a small number of providers creates concentration and dependence risk. The other options assume risk or responsibility is transferred, which the guidance rejects.
Did you get it right without looking?
One question tells you little. A timed set on Guidance on Managing Outsourcing Risk shows your real accuracy, how long you take and where you lose marks.
More Guidance on Managing Outsourcing Risk questions
- A bank outsources a critical function and the provider subcontracts part of it to a fourth party. Which contract design best manages the res…
- A bank relies on five critical outsourced services. Four are supplied by Vendor A, and Vendor A hosts its systems with a cloud provider that…
- A bank is negotiating a contract with a cloud service provider to host a critical payments application. Which contractual provision most dir…
- A bank's outsourcing register shows 40 material arrangements. Senior management reports to the board that all 40 have signed contracts, but …
- Several banks in a jurisdiction each use the same cloud provider for core processing, though each bank individually has only moderate depend…
- A bank outsources its loan servicing to a provider that in turn subcontracts collections to a third party. Which expectation of senior manag…