NO.PZ2023031302000007
问题如下：
The bank Q is reviewing one proposed relationship with a third-party vendor. In establishing policies to reduce the operational risk associated with the potential vendor contract, which of the following actions would be least appropriate?
选项：
A.
The bank should review the vendor’s incentive compensation structure and ensure that the structure does not encourage vendor sales representatives to direct customers towards higher margin products without regard for the risk incurred.
B.
The bank should develop the vendor's contingency planning process to mitigate risk exposure to the vendor.
C.
The bank should review all third-party audit reports of the vendor that are publicly available.
D.
The bank should treat any outsourced services with the same level of security and confidentiality as those performed by the bank itself.
解释：
考点：Managing Outsourcing Risk
解析：供应商的应急计划不需要由银行设立，银行只需要监测供应商的应急计划，并评估提供商计划的充分性和有效性，确保供应商的应急计划与银行自身计划保持一致。故选项B说法不正确，当选。
如果对外包的业务对银行的重要程度不一样，那是不是应该实行不同的风险政策呢？所以我认为d应该也是不正确的
