FSB Consults on Issues on Outsourcing and Third-Party Relationships
FSB published a discussion paper on the regulatory and supervisory issues related to outsourcing and third-party relationships. The discussion paper presents an overview of the evolving regulatory and supervisory landscape for outsourcing and third-party risk management in FSB member jurisdictions. It briefly describes the existing regulatory and supervisory approaches and outlines the common regulatory and supervisory challenges associated with outsourcing and third-party risk management, also identifying key issues for further exploration. FSB is seeking comments, by January 08, 2021, on the questions set out in the discussion paper.
In January-March 2020, the FSB Standing Committee on Supervisory and Regulatory Cooperation (SRC) conducted a survey among member jurisdictions on the existing regulatory and supervisory landscape for outsourcing and third-party risk management, including cross-border supervisory challenges and potential financial stability issues. The discussion paper provides a high-level overview of the existing landscape based on the survey findings as well as the preliminary observations from authorities’ and financial institutions’ recent responses to the COVID-19 pandemic. The paper intends to facilitate and inform discussions among authorities, financial institutions, and third parties on how to address the issues identified in the SRC survey and the 2019 FSB report on third-party dependencies in cloud services. The discussion has highlighted the following key challenges faced by supervisory authorities:
- Practical limitations on the ability to ensure that financial institutions appropriately manage the risks in their outsourcing and third-party agreements (including risks in the third party’s wider supply chain)
- Limitations on their ability to effectively oversee supervised financial institutions’ outsourcing and third-party arrangements in a cross-border context
- Challenges in identifying, monitoring, and managing potential systemic risks related to financial institutions’ use of outsourcing and third-party arrangements, particularly, due to concentration in the provision of third-party services and lack of relevant information
The high pace of evolution of third-party relationships, including where and how financial institutions use third-party providers, can make understanding and managing these risks more complex. In the paper, FSB highlights that additional analysis may be considered to better understand the risks posed by the changing landscape of outsourcing and third-party relationships. The additional analysis may also be considered to better understand whether the existing approaches allow financial institutions to capture the benefits of outsourcing and third-party relationships while sufficiently addressing the risks that these relationships may pose to financial institutions. The discussion paper emphasizes that effective cross-border cooperation and dialog among supervisory authorities as well as the effective application of existing standards and other emerging practices are important to address these challenges and risks.
Related Links
Comment Due Date: January 08, 2021
Keywords: International, Banking, Insurance, Securities, COVID-19, Third-Party Risk, Systemic Risk, Outsourcing Risk, Cloud Computing, FSB
Featured Experts

Victor Calanog, Ph.D.
Leading economist; commercial real estate; performance forecasting, econometric infrastructure; data modeling; credit risk modeling; portfolio assessment; custom commercial real estate analysis; thought leader.

Blake Coules
Across 35 years in banking, Blake has gained deep insights into the inner working of this sector. Over the last two decades, Blake has been an Operating Committee member, leading teams and executing strategies in Credit and Enterprise Risk as well as Line of Business. His focus over this time has been primarily Commercial/Corporate with particular emphasis on CRE. Blake has spent most of his career with large and mid-size banks. Blake joined Moody’s Analytics in 2021 after leading the transformation of the credit approval and reporting process at a $25 billion bank.
Previous Article
PRA Issues Guidance on Capital Distributions by Large UK BanksRelated Articles
FINMA Approves Merger of Credit Suisse and UBS
The Swiss Financial Market Supervisory Authority (FINMA) has approved the takeover of Credit Suisse by UBS.
BOE Sets Out Its Thinking on Regulatory Capital and Climate Risks
The Bank of England (BOE) published a working paper that aims to understand the climate-related disclosures of UK financial institutions.
OSFI Finalizes on Climate Risk Guideline, Issues Other Updates
The Office of the Superintendent of Financial Institutions (OSFI) is seeking comments, until May 31, 2023, on the draft guideline on culture and behavior risk, with final guideline expected by the end of 2023.
APRA Assesses Macro-Prudential Policy Settings, Issues Other Updates
The Australian Prudential Regulation Authority (APRA) published an information paper that assesses its macro-prudential policy settings aimed at promoting stability at a systemic level.
BIS Paper Examines Impact of Greenhouse Gas Emissions on Lending
BIS issued a paper that investigates the effect of the greenhouse gas, or GHG, emissions of firms on bank loans using bank–firm matched data of Japanese listed firms from 2006 to 2018.
HMT Mulls Alignment of Ring-Fencing and Resolution Regimes for Banks
The HM Treasury (HMT) is seeking evidence, until May 07, 2023, on practicalities of aligning the ring-fencing and the banking resolution regimes for banks.
MFSA Sets Out Supervisory Priorities, Issues Reporting Updates
The Malta Financial Services Authority (MFSA) outlined its supervisory priorities for 2023
German Regulators Issue Multiple Reporting Updates for Banks
Deutsche Bundesbank published the nationally deactivated validation rules for the German Commercial Code (HGB) users on the taxonomy 3.2, which became valid from December 31, 2022
BCBS Report Examines Impact of Basel III Framework for Banks
The Basel Committee on Banking Supervision (BCBS) published results of the Basel III monitoring exercise based on the June 30, 2022 data.
PRA Consults on Prudential Rules for "Simpler-Regime" Firms
Among the recent regulatory updates from UK authorities, a key development is the first-phase consultation, from the Prudential Regulation Authority (PRA), on simplifications to the prudential framework that would apply to the simpler-regime firms.