Independent Singapore VCC guidance
Direct answer
A useful VCC crisis tabletop tests decisions and communications, not whether participants can recite a plan. Choose one severe but plausible disruption, map the affected VCC services and providers, issue timed scenario updates, and require each participant to record what they know, who can authorise action, what message can be released and what evidence permits recovery. Finish with named control improvements, owners and acceptance criteria. Keep the exercise separate from production unless a controlled technical test has been approved.
At a glance
- Test one end-to-end service journey across manager, board and providers rather than isolated departmental scripts.
- Use timed information updates that force decisions under uncertainty without inventing facts participants would not possess.
- Separate operational status, investor messaging, regulatory assessment and technical recovery into controlled workstreams.
- Close findings only after evidence shows that the revised control can work in practice.
Who this is for
- A Singapore VCC or umbrella VCC whose essential operations depend on a fund manager, administrator, custodian, bank or technology provider.
Important exclusions
- An unannounced production failover, penetration test, legal notification decision or substitute for provider-specific recovery testing.
Choose a decision-rich disruption scenario
Begin with a service that investors and the VCC actually depend on, such as dealing, valuation, payment release, investor records or regulatory reporting. Describe a plausible initiating event and the operational consequence, while leaving enough uncertainty for participants to investigate. Avoid a scenario so broad that every control fails at once. The exercise should reveal whether the manager can identify affected sub-funds, distinguish a provider outage from a data-integrity concern, activate governance and protect records while facts develop. Link the scenario to current service maps, contracts and continuity arrangements so the discussion tests the real operating model rather than a fictional organisation.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of Singapore| Field | Facilitator question | Useful evidence |
|---|---|---|
| Essential service | Which investor or fund outcome is threatened? | Named service, owner and affected sub-funds. |
| Dependency | Which people, systems and providers support it? | Current service map and contact route. |
| Uncertainty | Which facts are unknown at activation? | Assumptions log and investigation owner. |
| Decision pressure | Which choice cannot wait for perfect information? | Authority, deadline basis and fallback. |
| Recovery proof | What shows the service is safe to resume? | Reconciliation, validation and approval evidence. |
Related guidance: critical VCC service outage map
Assign participants and decision rights
Invite the roles that own the service, make investment or operational decisions, communicate with investors, assess compliance consequences and coordinate providers. Give each person a role card that states authority, information sources, escalation path and backup. The VCC director, manager, administrator, custodian, technology owner and communications lead may see different facts at different times. The exercise should expose where two parties assume the other will decide, or where nobody can approve a workaround. Observers should capture evidence and behaviour without solving the scenario for participants. If an external provider cannot attend, use an agreed representative response based on the contract and documented contact procedures.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeParticipant readiness checks
- Every role has a named primary, backup and reachable contact route for the exercise window.
- Decision rights distinguish investigation, recommendation, approval, execution and external communication.
- Provider responsibilities reflect current contracts and operating procedures rather than historic assumptions.
- Observers know which behaviours, records and unresolved handoffs they are expected to capture.
- The facilitator can pause unsafe suggestions without turning the session into a pre-scripted answer.
Issue timed injects and record decisions
Release scenario updates in stages. Early injects should test detection, scope and activation. Later injects can introduce conflicting provider information, an approaching dealing cut-off, an investor query, a failed workaround or uncertainty about data completeness. Participants should record the fact available at that moment, the decision requested, options considered, authority used, affected VCC or sub-fund, action owner and review point. Do not reward speed when the proposed action would conceal uncertainty or bypass a necessary control. The aim is to observe how the team changes course as evidence improves and whether earlier assumptions remain visible rather than being rewritten after the event.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeFacilitator sequence
- DetectPresent an incomplete service failure and ask participants to confirm the event, ownership and affected operating window.
- ScopeAdd provider and sub-fund information that requires the team to separate confirmed impact from working assumptions.
- DecideIntroduce a time-sensitive investor or operational consequence that requires an authorised choice and recorded rationale.
- CommunicateProvide an external question and test whether the message is accurate, approved, audience-specific and consistent across channels.
- RecoverOffer partial restoration and require reconciliation and business validation before participants declare the service available.
Related guidance: VCC manual workaround approval
Control internal and external communications
Maintain one operational status record and a separate communication log. The first should show service condition, affected funds, known data issues, workarounds and recovery evidence. The second should show audience, message owner, source facts, approval and release channel. Investor communications should avoid speculation and should not promise a recovery time that the technical or provider evidence does not support. Internal updates should identify what changed since the prior report and what remains uncertain. Regulatory or legal notification questions need a defined assessment owner, but the exercise should not fabricate a filing duty. Record the decision route and identify any fact or advice still needed.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeProve safe recovery before standing down
A provider statement that a system is online is not enough to close a fund-service disruption. Define the business checks that confirm completeness and correctness: reconcile queued and processed instructions, compare control totals, verify timestamps, validate user access, identify duplicate or missing records and confirm each affected sub-fund. If a workaround was used, reconcile every manual record to the restored process and retire temporary access. The authorised service owner should accept the evidence and record any residual limitation. Communications should then be updated from the same confirmed status. If business validation fails, keep the incident open and state which service remains restricted.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeStand-down evidence
- Technical restoration is matched by business validation for the affected transaction and record populations.
- Manual workarounds, queues and duplicate risks are reconciled before normal processing is resumed.
- Each affected VCC and sub-fund has a documented status rather than relying on an umbrella total.
- Temporary access and emergency communication channels are withdrawn or brought under normal control.
- The authorised owner records residual limitations, monitoring and the basis for standing down.
Related guidance: VCC administrator continuity test
Turn exercise findings into control changes
Hold the debrief while decision records and observations are fresh. Separate plan defects, unclear authority, stale contact data, missing provider evidence, weak communications and recovery-control failures. Write each finding as a condition and consequence, then name the sustainable correction, accountable owner, target evidence and acceptance authority. A rewritten document is not sufficient where the weakness involved behaviour, data or system capability. Reperform the affected decision or communication step, or schedule a focused retest, before closure. Feed important lessons into service maps, contracts, training and incident procedures without erasing what the original exercise exposed.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Monetary Authority of SingaporeFinding closure path
- DescribeState the observed condition, affected service, evidence and plausible consequence without blaming an individual participant.
- CorrectChoose a durable change to authority, process, contract, data, access, training or technology that addresses the cause.
- EvidenceCollect revised artefacts and practical proof that the new control can be performed by the assigned role.
- RetestRepeat the failed handoff or decision under controlled conditions and preserve the outcome for independent review.
- AcceptHave the accountable authority close the finding or document remaining exposure, monitoring and a further action.
Related guidance: evidence-based control finding closure
Frequently asked questions
Should a VCC tabletop include every provider?
Include the providers needed for the selected service journey. A focused exercise can test the manager, administrator and custodian if they own the critical handoffs. Other providers may be represented through agreed scripts, but assumptions about their responses should be recorded and later validated against contracts and contact procedures.
Is a tabletop the same as a technical recovery test?
No. A tabletop tests understanding, authority, coordination and communication through a simulated scenario. A technical test demonstrates that systems, data and connections can recover. Use both where relevant, but do not treat discussion alone as proof that production technology or provider recovery works.
Can the exercise use a real recent incident?
Yes, after removing confidential or distracting details and defining the learning objective. Reusing a real event can improve plausibility, but the facilitator should not lead participants toward the historic answer. The session should test the current operating model and preserve any new weaknesses it reveals.
What should the board receive after the exercise?
Provide the scenario scope, participating roles, significant decisions, communication issues, recovery evidence, findings, accountable actions and unresolved exposure. The board needs enough information to challenge readiness and ownership, not a transcript that obscures the important control lessons.
When is an exercise finding complete?
Completion needs evidence that the agreed correction is implemented and can work. Depending on the weakness, that may require an updated authority record, a provider confirmation, a reconciled test, a communication rehearsal or a focused retest. Administrative closure without performance evidence leaves the original exposure unresolved.
Official sources and further reading
- Risk Management Practices for Fund Management Companies (Monetary Authority of Singapore)
- Response to Feedback on Business Continuity Management Guidelines (Monetary Authority of Singapore)
- Technology Risk Management Guidelines (Monetary Authority of Singapore)
- Guidelines on Individual Accountability and Conduct (Monetary Authority of Singapore)
- Understanding VCC Features, Eligibility and Requirements (Accounting and Corporate Regulatory Authority)
Discuss a Singapore VCC structure
For help coordinating a Singapore VCC setup or corporate administration, contact Raffles Corporate Services.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.