FRM Part II · FRM Exam Part II · Case Study: Third-party Risk Management
Which statement best describes the purpose of pre-contract due diligence on a prospective critical vendor?
Pre-contract due diligence evaluates the vendor's financial condition, controls, resilience and compliance record before the bank commits. It informs the selection and contract terms but neither shifts accountability to the vendor nor removes the need for ongoing monitoring afterward.
- ATo transfer legal accountability for the outsourced activity to the vendor
- BTo evaluate the vendor's financial condition, control environment, resilience and compliance record before committing to the relationshipCorrect
- CTo replace the need for ongoing monitoring after the contract is signed
- DTo determine the vendor's fees and service credits
Explanation
Due diligence assesses whether the vendor can deliver safely: financial strength, controls, business continuity, security and regulatory compliance. Accountability cannot be transferred, it does not replace monitoring, and fee setting is a commercial negotiation.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Third-party Risk Management shows your real accuracy, how long you take and where you lose marks.
More Case Study: Third-party Risk Management questions
- A bank's board is reviewing its third-party risk framework after a vendor failure. Which of the following best describes an appropriate divi…
- A bank's vendor risk team discovers that three of its critical service providers, each assessed as independent, all rely on the same subcont…
- A mid-sized bank signs a contract with a cloud provider to host its core payments platform. A senior manager argues that because the provide…
- A bank classifies 40 of its 200 third-party arrangements as critical. Internal audit finds that only 24 of the critical arrangements have a …
- A regional bank contracts a cloud provider to host its customer-facing mobile app. After a service outage, a manager argues that because the…
- A bank plans to outsource its payment-processing function to a vendor that itself relies on a subcontractor in another jurisdiction. Which r…