Skip to content
VARIABLE CAPITAL
COMPANIES ACT
Let’s talk

Singapore VCC insights

Run a VCC Service-Provider Incident Bridge

Independent Singapore VCC guidance

By Variable Capital Companies Actimplementation guide

Direct answer

Open a VCC service-provider incident bridge when an outage threatens valuation, dealing, custody, payments, investor records or statutory administration. Name one incident lead, define the affected VCCs and sub-funds, establish a single fact log and assign provider, decision and communication owners. Separate verified status from estimates. Apply pre-agreed degraded-service and stop conditions, preserve approvals, and escalate material investor or regulatory effects. Keep the bridge active until services are restored, backlogs are reconciled and the VCC can prove that records, cash, assets and investor outcomes are complete.

At a glance

  • Organise the bridge around affected fund services, not provider technology labels.
  • Use one timeline and decision log across manager, providers and board.
  • Degraded operation needs explicit limits, approvals and reconciliation.
  • Recovery is incomplete until backlogs and fund records are verified.

Who this is for

  • VCC operating teams responding to administrator, custodian, bank, transfer-agent, data or technology disruption.

Important exclusions

  • Cyber-forensics instructions, emergency-services advice or replacing a regulated incident-reporting assessment.

Declare the incident and name authority

Define who may declare the bridge, who leads it and who can make decisions for the manager and VCC. Capture the first known time, affected provider, suspected services, VCCs, sub-funds, investor events, assets, cash and deadlines. Do not wait for a perfect root cause before containing risk. MAS frames operational resilience around continued delivery of critical business services, including through third-party disruption. Translate that into the fund outcomes at risk, such as an accurate NAV, controlled dealing, protected assets and reliable investor communications.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online
  • Name the incident lead, scribe and decision authorities.
  • List affected VCCs, sub-funds, classes, services and cut-offs.
  • Record verified facts, assumptions, unknowns and next evidence times separately.
  • Set the first board and provider escalation points.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore

Build one service-impact map

Map the failed component to end-to-end services. An administrator outage may affect pricing, transfer agency, fee calculations, investor statements and regulatory data. A custodian outage may affect position proof, cash availability, corporate actions and settlement. Identify upstream inputs and downstream decisions, including manual alternatives and their limits. The provider recovery target is only one input. The VCC needs its own view of when the fund service becomes safe and complete, especially where several providers depend on the same cloud, data vendor or communication route.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Accounting and Corporate Regulatory Authority
Incident service map
ServiceEvidence needed nowDecision at risk
NAV and valuationPositions, prices, cash, exceptions and prior closeRelease, delay or use an authorised contingency.
Dealing and registerRequests, cut-offs, holdings and accepted statusAccept, pause or defer investor transactions.
Custody and paymentsAsset and cash positions, authorities and pending settlementsPermit, hold or reroute instructions.
Corporate administrationRegisters, filings, approvals and document accessContinue, extend or escalate the affected obligation.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online · Accounting and Corporate Regulatory Authority

Run a disciplined bridge rhythm

Use a short repeating cycle: status, change since the last checkpoint, evidence received, decisions required, actions, owners and next update. The scribe should maintain one timestamped log and reject conflicting side-channel status as authoritative until verified. Invite only people who own evidence or decisions. Separate technical recovery from fund release. A system may be online while data remains incomplete, duplicated or stale. Require the provider to state scope, last good state, backlog, dependencies, recovery test and residual risk in terms the VCC team can evaluate.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore
  1. StabiliseContain unsafe instructions, preserve evidence, confirm authority and identify the last reliable fund state.
  2. AssessMap service impact, investor events, asset and cash exposure, deadlines, providers and shared dependencies.
  3. DecideApprove stop, degraded-service, communication and escalation choices with their evidence and expiry conditions.
  4. RecoverRestore service, replay backlogs, reconcile every fund record and obtain accountable sign-off before closure.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore

Control degraded service and manual workarounds

A workaround should have a defined purpose, population, data source, maker-checker control, expiry and reconciliation plan. Do not move a critical process into email or an unmanaged spreadsheet merely because the main system is unavailable. Decide which activities may continue safely and which should stop. For example, investor requests might be received and timestamped without being accepted for a dealing point, or payments might remain blocked until approved bank and ownership records are accessible. Record any lowered capacity or delayed output before stakeholders rely on it.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online
  1. Reliable source data and approved contingency existOperate within the tested capacity, record every item and schedule independent reconciliation after restoration.
  2. Data exists but authority is uncertainContain the item and escalate to the named fund or board authority before processing.
  3. Authority exists but data cannot be provedDo not process the event; protect the original cut-off evidence and communicate the dependency.
  4. Investor or asset harm may be occurringEscalate immediately, assess reporting and disclosure duties, and preserve the complete incident evidence trail.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online

Coordinate communications and regulatory assessment

Prepare a common facts sheet for the board, providers, investors and any reporting assessment, but tailor detail to each audience. State what is affected, what remains safe, which services are paused, what the next update will cover and where instructions should be sent. Do not speculate about cause, recovery time or loss. The regulated manager and each affected provider should assess their own notification duties from current instruments and licence conditions. The VCC board needs the fund impact and decisions, not only a vendor incident number.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online · Accounting and Corporate Regulatory Authority

Prove recovery before closing the bridge

Require more than a green system status. Reconcile the last good position to the restored state, replay or cancel queued work, identify duplicates, test interfaces, validate access, compare cash and assets, complete investor events and close temporary authorities. Review any NAV, dealing, payment, register, filing or communication that crossed the incident window. Residual defects need owners and deadlines outside the bridge. The closure paper should show service restoration, control evidence, investor outcomes, regulatory assessments, board decisions and lessons that will change the continuity plan or provider oversight.

Sources: Monetary Authority of Singapore · Monetary Authority of Singapore · Singapore Statutes Online · Accounting and Corporate Regulatory Authority
  • Reconcile pre-incident, workaround and restored records.
  • Prove pending transactions were completed, cancelled or carried forward once.
  • Remove temporary access and manual authorities.
  • Confirm communications and notification assessments are complete.
  • Assign root-cause, contract, control and retest actions with owners.
Sources: Monetary Authority of Singapore · Monetary Authority of Singapore

Frequently asked questions

When should a VCC open an incident bridge?

Open it when a disruption threatens a critical fund service, deadline, investor outcome, asset or record and ordinary escalation cannot coordinate the necessary evidence and decisions quickly enough.

Should the service provider lead the bridge?

The provider should lead its technical recovery, but the VCC or manager needs its own incident authority. Only the fund side can join investor, valuation, dealing, board and cross-provider decisions.

Can the administrator calculate a manual NAV?

Only under an approved contingency with reliable source data, controlled calculations, independent review and a post-recovery reconciliation. If those conditions are absent, hold the release decision and escalate.

When should investors be told about an outage?

Use the governing documents, regulatory assessment and actual impact. Communicate when their dealing, payment, reporting or instructions are affected, while avoiding unsupported cause or recovery promises.

What is the bridge closure standard?

Critical service is restored, backlogs and workarounds are reconciled, investor and fund records agree, temporary access is removed, required assessments are complete and residual actions have accountable owners.

Official sources and further reading

Discuss your fund, family office or trust structure

Contact Raffles Corporate Services about Singapore VCC setup, fund structures, family offices and corporate administration.

Where legal assistance is required, we can coordinate an introduction to an associate independent law firm, with your consent. The law firm advises you under a separate engagement. Raffles Corporate Services is not a law firm. Tax, investment management and trustee services, where needed, require appropriately qualified or authorised providers.

General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.

Your next step.

Let’s talk about your plans.

A fund, a family office or a trust structure. We coordinate corporate work alongside experienced law firms for legal and tax advice.

Talk to our team