External vendor assisting with record searches.

Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

When a bank uses an external firm to perform record searches, this arrangement is best described as a Third-Party Service Provider. The term identifies an outside organization that processes or retrieves data on the bank’s behalf under a contract, bringing vendor-management considerations into play—such as due diligence, access controls, data security, and audit rights—to protect confidentiality and comply with applicable laws.

This fits the scenario because the emphasis is on the external party handling record searches, not on a policy against direct access, a broad principle of security and confidentiality, or a generic requirement to demonstrate compliance. Direct Access Prohibition would suggest a rule about access itself rather than naming the party performing the work; Security & Confidentiality is an overarching objective that applies in all cases but doesn’t specify who conducts the searches; Compliance Demonstration relates to showing adherence rather than identifying the relationship with an external helper.