OUTSOURCING REGISTER

Name of Financial Institution

Updated as at YYYYMMDD

Name of Respondent
Designation / Title
Contact Number
Email Address

Name of Reviewer
Designation / Title
Contact Number
Email Address

Instructions

This outsourcing register should be maintained by senior officers

who have direct knowledge of the financial institutions outsourcing
arrangements. The information provided in this register should be
reviewed by their superiors.
GUIDELINES ON OUTSOURCING JUN 2016

No. Outsourced service(s)
*a separate row should be added for each unique
service / each service under a master agreement.
Description of outsourced service(s) Name of service provider / material sub-contractor
as set out in the outsourcing agreement
*For each service provider, please provide
information on each *material sub-contractor, if
any, under a new row.

*A material sub-contractor is a party who is

engaged by the service provider of an institution
to undertake a significant or important part of the
service covered under the outsourcing
arrangement. In assessing materiality, institutions
may refer to Annex 2 of the Guidelines on
Outsourcing, which provides guidance on whether
an arrangement would be considered a material
outsourcing arrangement.

Example 1 Information systems management and maintenance Renting of data centre space to house disaster recovery (DR) equipment. XYZ Pte Ltd.

Example 1a Information systems management and maintenance Control and regulation of data centre environmental conditions (e.g. ABC Pte Ltd.
temperature and humidity)

Example 2 Middle and back office operations Outsourcing of remittance and treasury operations DEF Inc.

Example 2b Middle and back office operations Outsourcing of remittance and treasury operations GHIJK Inc.
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

Category Business registration number of Country where the service provider / Type of outsourcing Materiality
service provider / material sub- material sub-contractor is registered
contractor (please provide the ISO 3166-1 alpha-
3 country code)

Service provider 123456789A SGP Third-party Material

Material sub-contractor 987654321A SGP Third-party Material

Service provider 12-3456789 USA Intra-group outsourcing (Branch / Material

subsidiaries to Head Office)

Material sub-contractor 98-7654321 USA Third-party Material

GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

When did the institution perform the Service provider / material sub- Service provider / material sub-contractor Please list all the cities where the
materiality assessment? contractor supports business stores or processes customer service will be carried out
(YYYYMMDD) operations that are time critical information which in the event of any
unauthorised access or disclosure, loss
or theft of the information, may have a
material impact on the customer

20120521 No Yes Singapore

20120521 No No Singapore

20160403 Yes Yes Seattle, Washington

Phoenix, Arizona

20160403 Yes Yes Seattle, Washington

Phoenix, Arizona
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

Please list all the cities where customer Service provider substitutability Alternate service provider has been identified Service commencement date
information will be stored or processed (YYYYMMDD)
*Service provider only *Service provider only

Singapore Can be substituted with moderate impact to Yes, identified 20120720

business operations

N.A N.A (material sub-contractor) N.A (material sub-contractor) 20120720

Seattle, Washington Can be substituted with major impact to Do not need alternate service provider (please 20160720
Phoenix, Arizona business operations elaborate in the Other Comments column)

Seattle, Washington N.A (material sub-contractor) N.A (material sub-contractor) 20160720

Phoenix, Arizona
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

Last contract renewal date Service expiry or next When did the institution last Was there a change in materiality Institution's frequency of audit on the service
(where applicable) contract renewal date undertake due diligence on the following the most recent due provider / material sub-contractor (Year(s))
(YYYYMMDD) (YYYYMMDD) outsourcing / sub-contracting diligence undertaken on the
arrangement? (YYYYMMDD) outsourcing / sub-contracting
*Service provider only *Service provider only arrangement?

20140720 20190720 20160201 No 1 year

N.A N.A 20160201 No 1 year

N.A 20190720 20160502 No 1 year

N.A N.A 20160502 No 1 year

GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

Others (please elaborate in the Other Comments column)

When was an independent audit last Who conducted the audit? When did the service provider / material sub- Did the service provider / material sub-
conducted on the service provider / contractor last tested its business continuity contractor meet all the objectives of the
material sub-contractor? (YYYYMMDD) plan (BCP)? (YYYYMMDD) BCP test successfully?

20160301 Internal auditor of institution 20160118 Yes

20160301 External auditor of material sub-contractor 20151114 Yes

20160502 Group or regional auditor of institution 20160304 Yes

20160502 Group or regional auditor of institution 20160304 Yes

GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016
GUIDELINES ON OUTSOURCING JUN 2016

Other comments (if any)

A
p
p
l
W
i
h
ci
ta
M
tie
id
-
Outsourcing to parent institution. Further outsourcing by lo
d
Business continuity and disaster recovery functions and activities;
n
la
parent institution to GHIJK Inc.
b
e
p
e
Claims
ra administration (e.g., loan negotiations, loan processing, collateral management, collection of bad loans)
l
o
ln
icd
Document
e
n processing
sg
b
sa
iInformation
ca systems hosting (e.g., software-as-a-service, platform-as-a-service, infrastructure-as-a-service)
n
rk
rg
a
Information systems management and maintenance
o
(f
n
e
g
f
.ie
Investment management (e.g., discretionary portfolio management, cash management)
g
m
c
.e
,n
to
lp
s
o
e
sa
r
GUIDELINES ON OUTSOURCING JUN 2016

Management of policy issuance and claims operations by managing agents

Manpower management (e.g., benefits and compensation administration, staff appointment, training and development)

Marketing and research

Professional services relating to the business activities of the institution (e.g., accounting, internal audit, actuarial, compliance)

Support services relating to archival and storage of data and records

Others
GUIDELINES ON OUTSOURCING JUN 2016