Risk Sharing
What is Risk Sharing?
A risk treatment strategy where the risk is shared with another party, such as through joint ventures, partnerships, or outsourcing arrangements.
Frameworks that govern risk sharing
What the standards actually require on risk sharing
Requirements naming risk sharing across 5 standards, quoted from the control text.
Requirement 0222 (Part Four: Technology, section 13.6 Technology Lifecycle Management; applies to All entities; dated 01 July 2026; new in Release 2026): A policy that considers sharing risk assessments of products, applications and web services to the Central...
protective-security-policy-framework-pspf-release-2026::0222 · 0222 Policy on sharing risk assessments to the Centralised Risk Sharing Capability →The institution enacts policies, procedures and controls that ensure conformity with the operating circulars, procedures and rules of the payment and settlement systems it participates in, keeps its contracts with customers, counterparties and vendors sound un...
ffiec-it-examination-handbook::WPS-09 · Legal (Compliance) Risk (Wholesale Payment Systems) →The assessment examines how each control is meant to modify risk, whether it is in place, capable of working and achieving results, whether design or application has shortcomings or gaps, whether controls work independently or only together, what conditions co...
iec-31010-2019::6.3.4 · 6.3.4 Investigating the effectiveness of existing controls →Execute the Respond step per NIST SP 800-39 Chapter 3 Section 3.3. Risk response includes (a) identifying alternative courses of action for responding to risk (accept + avoid + mitigate + share + transfer per Section 2.5.2), (b) evaluating alternatives against...
NISTSP39-4 · Risk Responding: Identify, Evaluate, Decide, Implement →The 7(a) Lender keeps the continuing ability to evaluate, process, close, disburse, service, liquidate and litigate its SBA loans and exercises day-to-day responsibility for them, using an LSP (any Agent carrying out Lender functions for pay, including pre-qua...
us-sba-sop-50-10-8-1-lender-and-development-company-loan-programs::A4-D-LSP · Section A Ch 4 Para D.5 and D.6: Lender Service Provider agreements reviewed by SBA →Questions people ask about risk sharing
What is Risk Sharing?
Why is Risk Sharing important for compliance?
Which compliance frameworks address Risk Sharing?
Where can I learn more about Risk Sharing?
See how Risk Sharing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.