Skip to content

FRM Part II · FRM Exam Part II · Case Study: Third-party Risk Management

Before signing a contract with a prospective provider of loan-servicing, which activity should a bank's third-party risk framework place first in the lifecycle?

Risk assessment of the activity and due diligence on the provider come first. The third-party lifecycle begins with planning, risk assessment and due diligence before contracting, then proceeds to ongoing monitoring and finally renewal or termination and exit.

  1. ATermination and exit execution
  2. BOngoing performance reporting review
  3. CRisk assessment of the activity and due diligence on the providerCorrect
  4. DAnnual contract renewal negotiation

Explanation

The usual lifecycle runs from planning and risk assessment, through due diligence, contracting, ongoing monitoring, to termination or exit. Pre-contract, the bank must assess the activity's risk and the provider's capability. The other options occur after the contract exists.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Third-party Risk Management shows your real accuracy, how long you take and where you lose marks.

More Case Study: Third-party Risk Management questions