Independent Singapore VCC guidance
Direct answer
A useful VCC outage map starts with services, not provider names. For each service, record the VCC and sub-funds affected, the input data, upstream and downstream dependencies, maximum tolerable disruption set by the organisation, manual substitute, decision owner, communications route and evidence that proves recovery. Test the map against a realistic failure, then update contracts, access, data extracts and escalation contacts wherever the rehearsal reveals that a workaround exists only on paper.
At a glance
- Map outcomes such as dealing, valuation and cash movement rather than vendor labels.
- Connect each service to data, people, systems, counterparties and decisions.
- Define a manual or alternate path and the authority to invoke it.
- Prove recovery through reconciled outputs, not a provider status message.
Who this is for
- VCC boards, fund managers and operations teams overseeing administrators, banks, custodians, brokers, data vendors and technology providers.
Important exclusions
- This is not a technical disaster-recovery configuration guide or a substitute for provider-specific security and continuity testing.
Start with investor and fund outcomes
Name the outcome that would stop or become unreliable if the service failed. Examples include accepting an investor, striking a valuation, issuing dealing confirmations, moving cash, recording a corporate action or producing board information. Then identify the VCC, sub-fund, share class, dealing point and investor population affected. MAS material for fund managers emphasises clear risk ownership, reliable information and controls around outsourced or operational dependencies. ACRA's VCC guidance also makes structure relevant because one umbrella can contain several economically separate sub-funds.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Accounting and Corporate Regulatory Authority| Field | Question the map must answer |
|---|---|
| Outcome | What investor, portfolio, cash, valuation or reporting result depends on the service? |
| Perimeter | Which VCC, sub-funds, share classes, currencies and jurisdictions are affected? |
| Inputs | Which files, prices, approvals, credentials or counterparty messages must arrive? |
| Dependencies | Which people, systems and providers sit upstream and downstream? |
| Fallback | What alternate or manual route exists, and who may invoke it? |
| Recovery proof | Which reconciled output shows that ordinary processing is safe again? |
Separate providers from services
One provider may perform transfer agency, fund accounting, investor reporting and payment preparation, but those services can fail independently and have different consequences. Conversely, one service may depend on several providers. A valuation can rely on market data, manager estimates, administrator calculations, independent challenge and board oversight. Create one row per outcome-level service and link provider contracts beneath it. This makes concentration visible and prevents a replacement provider discussion from overlooking credentials, historic data or an approval that remains elsewhere.
Sources: Monetary Authority of Singapore · Monetary Authority of SingaporeService decomposition check
- Break each contract into the discrete outcomes delivered to the VCC.
- Identify hidden utilities, file-transfer channels and named people supporting each outcome.
- Record the data history and credentials needed to move the service.
- Show whether two apparent alternatives depend on the same upstream vendor.
- Assign a VCC or manager owner who understands the full chain.
Related guidance: VCC provider exit and handover plan
Design a fallback that can actually run
A fallback needs a trigger, authorised decision-maker, current data, usable access and a reconciliation path. Writing “manual process” is not enough. Describe who extracts the last reliable dataset, how new instructions are logged, which calculations can be performed safely, what remains suspended and how duplicate processing will be prevented after recovery. Where the fallback changes timing or investor treatment, route the decision through the relevant fund and governance documents before communicating it.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Accounting and Corporate Regulatory AuthorityFallback readiness test
- Inputs are currentConfirm the fallback can access complete and recent positions, investors, cash, prices, approvals and pending exceptions.
- Authority is clearName the person who invokes the workaround and the separate person who challenges high-impact outputs.
- Output can be reconciledDefine the control totals, exception comparison and sign-off needed before an output is released.
- Return is controlledPlan how manual and restored-system records will be merged without duplication, omission or loss of history.
Related guidance: fund administrator continuity test
Use a scenario that crosses provider boundaries
Test a realistic event, such as the administrator missing a valuation file while the bank remains operational and redemption payments are due. Ask the team to identify the last reliable position, disputed inputs, affected share classes, decision owner, communications perimeter and safe fallback. Then introduce a second complication, such as unavailable credentials or a late broker confirmation. A cross-provider scenario reveals assumptions that a single-provider questionnaire cannot, especially when each party believes another party owns investor impact or final approval.
Sources: Monetary Authority of SingaporeOutage exercise sequence
- DeclareRecord the failed service, first observed time, affected perimeter and person controlling the incident log.
- StabiliseFreeze unreliable outputs, protect source evidence and continue only activities supported by current data.
- Operate fallbackUse the authorised substitute while logging every manual decision, instruction and control total.
- RecoverReconcile missed and duplicated activity before the restored service becomes the book of record again.
- RepairConvert each failed assumption into an owner, contract, access, data or testing action.
Related guidance: cyber incident response across providers
Prove recovery and maintain the map
Provider availability is only one recovery signal. The VCC should prove that positions, cash, investor orders, prices, fees, approvals and exceptions reconcile across the disruption window. Record any output delayed, estimated or manually approved and carry it into the next valuation, investor communication or board pack. Refresh the map after provider changes, new sub-funds, new asset classes, system migrations, changes in signatories or material incidents. A concise current map is more useful than a long continuity plan whose contacts and dependencies are obsolete.
Sources: Monetary Authority of Singapore · Accounting and Corporate Regulatory AuthorityRelated guidance: VCC books and records location map
Frequently asked questions
Is every outsourced service critical?
No. Criticality depends on the consequence and timing of failure for the actual VCC. A low-volume service may still be critical at a dealing, payment or reporting point, while a high-cost service may tolerate a longer interruption.
Should the map be organised by provider?
Use the service outcome as the primary row and link providers beneath it. This shows when one provider supplies several services or when several providers share one dependency, both of which can be hidden in a vendor-only inventory.
What makes a manual fallback credible?
It needs current data, tested access, named authority, a controlled input log, output checks and a route back into the ordinary system. A narrative instruction without those elements is an intention, not a functioning fallback.
How does an umbrella VCC affect the map?
The map should show which sub-funds, share classes and accounts depend on each service. A provider outage may affect the whole umbrella, while a data or counterparty failure may be limited to one sub-fund or strategy.
How is recovery proved after an outage?
Reconcile every affected record across the disruption window, including positions, cash, investor orders, valuations, fees, approvals and exceptions. Service availability alone does not prove that processing resumed completely or accurately.
Official sources and further reading
- Risk Management Practices for Fund Management Companies (Monetary Authority of Singapore)
- Guideline on Licensing, Registration and Conduct of Business for Fund Managers (Monetary Authority of Singapore)
- Understanding VCC Features, Eligibility and Requirements (Accounting and Corporate Regulatory Authority)
- Legal Obligations of a VCC Director (Accounting and Corporate Regulatory Authority)
Discuss a Singapore VCC structure
For help coordinating a Singapore VCC setup or corporate administration, contact Raffles Corporate Services.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.