Third-Party Risk Management

Key resources on third-party (including outsourcing) risk management applicable to the bank and non-bank sectors are set out below. 

Financial institutions are expected to ensure that services provided by third parties are subject to adequate governance and sound risk management controls. Services provided by third parties include services, outsourcing or otherwise, provided by intragroup or external service providers. Financial institutions should also comply with other MAS' regulations and guidance on operational risk, technology risk and business continuity management in relation to outsourcing and third-party risk management.

With increasing reliance by financial institutions on third-party services, MAS will consider the need for additional regulations or guidelines to address the risks arising from financial institutions’ use of third-party services, including non-outsourced relevant services. 

Resources for Banks 

Notices 

Important dates to note:
  • Notice 658 on Management of Outsourced Relevant Services for Banks issued on 11 December 2023 takes effect on 11 December 2024.
  • Notice 1121 on Management of Outsourced Relevant Services for Merchant Banks issued 11 December 2023 takes effect on 11 December 2024.
 

Guidelines and Information Paper

Important dates to note:

  • Guidelines on Outsourcing issued on 27 July 2016 (last revised on 5 October 2018) is in effect until 10 December 2024.
  • Guidelines on Outsourcing (Banks) issued on 11 December 2023 takes effect on 11 December 2024.

Consultation Paper and Responses

Other Resources for Banks

Outsourcing Register Template
  • MAS has published a template of Outsourcing Register (version 1.1) that banks and merchant banks should adopt for outsourcing register submissions to MAS from 11 December 2024.
  • In the interim, banks and merchant banks should continue with submissions using the existing template (version 1) of the outsourcing register until 10 December 2024.
Notices

 

 

Resources for Financial Institutions other than Banks

Guidelines and Information Paper

Important dates to note:

  • Guidelines on Outsourcing issued on 27 July 2016 (last revised on 5 October 2018) is in effect until 10 December 2024.
  • FAQ on MAS Guidelines on Outsourcing issued on 27 July 2016 was last revised on 11 December 2023.
  • Guidelines on Outsourcing (Financial Institutions other than Banks) issued on 11 December 2023 takes effect on 11 December 2024.

Other Resources for Financial Institutions other than Banks