Third-Party Risk Management

Key resources on third-party (including outsourcing) risk management applicable to the bank and non-bank sectors are set out below. 

Financial institutions are expected to ensure that services provided by third parties are subject to adequate governance and sound risk management controls. Services provided by third parties include services, outsourcing or otherwise, provided by intragroup or external service providers. Financial institutions should also comply with other MAS' regulations and guidance on operational risk, technology risk and business continuity management in relation to outsourcing and third-party risk management.

With increasing reliance by financial institutions on third-party services, MAS will consider the need for additional regulations or guidelines to address the risks arising from financial institutions’ use of third-party services, including non-outsourced relevant services. 

Resources for Banks 

Notices 

Guidelines and Information Paper

Consultation Paper and Responses