Can the test be signed electronically?

Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states provided intent, consent, attribution, and record retention are present.

When is notarization required?

Notarization is rarely required for internal stress tests. If the test is attached to a legally significant instrument, check state rules; deeds and some affidavits still need notarization.

How long must records be kept?

Retention depends on industry rules: IRS minimum three years (IRC §6501(a)), HIPAA six years (45 CFR §164.530(j)). Maintain records longer when required by state or sector rules.

Who should sign as approver?

An authorized senior manager or officer responsible for the area tested should sign. Document the approver’s role and authority in governance materials.

Can I update a completed test?

Yes. Maintain version control: keep the original, publish a revised copy with a new version number, and document changes and rationale for auditability.

What if data inputs are later found incorrect?

Record the error, rerun affected scenarios, and note corrections in an amendment log. Failure to correct material errors may lead to audit findings or regulatory questions.

Electronic Signature
Templates
Miscellaneous
Risk Assessment Stress Test

Risk Assessment Stress Test

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

RISK ASSESSMENT STRESS TEST AND ENGAGEMENT AGREEMENT

Parties

Client Name Service Provider Name

Recitals

WHEREAS, Client operates the business identified above and requires an independent quantitative and qualitative stress test of selected risk exposures, and

WHEREAS, Service Provider represents that it has the professional expertise, personnel and methodologies necessary to conduct such stress testing and to prepare a written assessment and recommendations, and

WHEREAS, the parties wish to set forth the terms on which Service Provider will perform a Risk Assessment Stress Test engagement for Client.

Scope of Work

Service Provider shall perform the stress test engagement described below and deliver a written report setting forth methodology, data inputs, results, key findings and recommended mitigations. Services shall include scenario design, model calibration, model validation where applicable, sensitivity analysis, and an executive summary of actionable items.

Detailed Scope (describe scenarios, deliverables and acceptance criteria)

Stress Test Parameters

Assessment Date: Primary Currency:

Select Risk Categories to Include

Credit risk Market risk Liquidity risk Operational risk Other

If Other, describe Stress Scenarios (select and/or describe custom scenarios)

Baseline (current policy assumptions) Adverse economic shock Severe systemic stress

Custom Scenario Description

Assumptions, Data and Methodology

Key Assumptions Primary Data Sources Methodology Summary

Metrics, Thresholds and Inputs

Total Exposure Assessed: Capital Ratio Threshold (%):

Liquidity Shortfall Trigger (amount): Project Horizon (months):

Results, Findings and Recommendations

Aggregate Results and Observations Key Findings (concise bullets or narrative) Recommended Mitigations and Actions

Limitations and Disclaimers

Service Provider's analysis is based on information provided by Client and on the assumptions identified above. Service Provider shall not be responsible for undisclosed data, misstatements or omissions in Client-supplied information. Results are scenario-based estimates and do not constitute a guarantee of outcomes. Client acknowledges that models may not capture all market dynamics and that subsequent events may materially alter results.

Client acknowledges these limitations:

Payment Terms

Engagement Fee: Payment Schedule:

Invoicing Frequency: Payment Due (days):

Late Fee:

Term and Termination

Term Start Date: Term End Date:

Either party may terminate for material breach if the breaching party fails to cure within days following written notice. Termination for convenience requires days' prior written notice.

Confidentiality

Both parties agree to treat all non-public information exchanged in connection with this engagement as Confidential Information. Confidential Information shall not be disclosed to third parties except (i) as required by law, (ii) to permitted advisors under confidentiality obligations, or (iii) with the other party's prior written consent. Recipient shall use at least the same degree of care to protect Confidential Information as it uses to protect its own confidential information, but no less than reasonable care.

Confidentiality Obligations Acknowledged:

Governing Law; Entire Agreement

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction specified by Client below, without regard to conflicts of law principles. Any dispute arising under this Agreement shall be resolved in the courts of that jurisdiction.

Governing Jurisdiction:

This Agreement constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, representations and understandings, whether written or oral.

Representations and Certifications

Each party represents and warrants that it has the power and authority to enter into this Agreement and to perform its obligations hereunder. Client certifies that all data provided to Service Provider for the purposes of the stress test is accurate to the best of Client's knowledge at the time of submission.

Client data certified as accurate:

Client:

By:

Date:

Service Provider:

By:

Date:

What the Risk Assessment Stress Test Is and when it applies

The Risk Assessment Stress Test is a structured assessment used to model how an organization, project, or system performs under adverse conditions. It documents scenarios, assumptions, inputs, and quantitative results so stakeholders can evaluate resilience, identify critical vulnerabilities, and prioritize mitigation. Typical subjects include financial stress tests, operational continuity scenarios, cybersecurity incident simulations, and third‑party dependency breakdowns. The resulting record supports internal risk governance, board reporting, and, where applicable, regulatory compliance for industries with mandated stress testing requirements.

Why a formal Risk Assessment Stress Test adds value

A documented stress test provides repeatable scenarios and measurable outputs that improve decision quality, reduce uncertainty, and demonstrate due diligence to auditors and regulators.

Who typically prepares and reviews a Risk Assessment Stress Test

Teams from risk management, finance, compliance, IT, or operations prepare the test; reviewers include executives, internal audit, and external examiners.

Risk Management Teams — Coordinate scenario design, controls mapping, and mitigation planning across business units.
Finance and Modeling Analysts — Build quantitative scenarios, run simulations, and produce sensitivity tables for decision makers.
IT / Security Operations — Supply technical assumptions, run cyber‑impact scenarios, and validate incident response dependencies.

Final sign‑off typically requires an authorized senior manager or officer accountable for the area under test.

Core sections every professional Risk Assessment Stress Test should include

A complete test combines context, scenario definitions, inputs, analysis, mitigation plans, and documented conclusions to enable review and replication.

Executive Summary

Concise overview of scope, key scenarios, material findings, and recommended actions for leadership review and board reporting.

Scope & Assumptions

Explicit list of boundaries, time horizon, model assumptions, and excluded items so results are interpretable and reproducible.

Scenario Definitions

Detailed adverse scenarios (e.g., dual vendor outage, 30% revenue shock) with triggers, severity levels, and rationale for selection.

Inputs & Data Sources

Inventory of datasets, date ranges, model versions, and data quality notes used to run each scenario and sensitivity analysis.

Results & Analysis

Quantitative outputs, key metrics, charts, and narrative interpretation showing impacts on liquidity, operations, compliance, or security posture.

Remediation Plan

Prioritized controls, owners, timelines, and residual risk assessment to track mitigation and future re‑testing requirements.

Required fields and metadata for a reliable Stress Test record

Assessment Title: Clear, descriptive name

Effective Date: MM/DD/YYYY

Author / Owner: Responsible person

Version: Document version number

Scope Summary: Covered systems/business units

Signatory: Approving manager name

Step-by-step: completing a Risk Assessment Stress Test

Follow a structured sequence to ensure consistency: define scope, select scenarios, gather inputs, run analyses, document results, and obtain approvals.

01

Define scope: Set boundaries, units, and time horizon.
02

Select scenarios: Choose realistic, high‑impact adverse events.
03

Gather inputs: Collect datasets, assumptions, and controls information.
04

Analyze and document: Run models, capture outputs, and write conclusions.

How to configure an online workflow for this test

Set up a digital workflow to collect inputs, route reviewer approvals, and capture an audit trail for each stage of the stress test.

Form Element \| Online Configuration Options	Description \| Value format
Assessment Title field	Single‑line text, required, no special characters
Effective Date selector	MM/DD/YYYY date picker, required validation
Data attachment	PDF/CSV upload allowed, max file size per policy
Approval routing	Sequential reviewers with conditional escalation

Where to send completed tests and typical routing

Completed stress tests should follow a documented routing path to preserve chain of custody and provide reviewers with required artifacts.

Primary Repository: Store master copy in secured records system.
Reviewer Distribution: Route to internal audit and risk committee.
External Filing: Provide regulators on request with redaction if required.
Retention Copy: Archive per records retention policy.

Technical considerations for sharing and signing

Choose a platform that supports secure file formats, an audit trail, and appropriate signer authentication for your risk profile.

File formats: PDF and DOCX supported
Authentication: Email, SMS, or stronger
Integrations: CRMs and document stores

Ensure the platform can produce an immutable audit report capturing timestamps, IP addresses, and signer attribution to support compliance and internal governance.

Timing, deadlines, and typical processing expectations

Establish clear internal deadlines for each phase and communicate expected turnaround times to contributors and approvers.

Data collection window:

Typically 2–4 weeks depending on scope

Modeling and analysis:

1–3 weeks for standard scenarios

Initial review:

3–7 business days for reviewers

Executive sign‑off:

1–2 weeks depending on calendar

Publication and archive:

Archive immediately after approvals

Common preparation mistakes to avoid

Undefined scope or shifting assumptions leading to inconsistent results and poor comparability across test runs.
Using stale or incomplete data sets that understate exposure or hide correlations between impacted elements.
Insufficient documentation of model versions, inputs, or formulas that prevents repeatability and independent validation.
Not assigning clear owners or deadlines for remediation items, causing mitigation actions to stall after reporting.

Consequences of inadequate or incorrect stress testing documentation

Regulatory scrutiny: Possible fines or corrective action

Audit findings: Material weaknesses may be reported

Contract risk: Vendor or counterparty disputes

Operational failure: Unmitigated vulnerabilities persist

Reputational harm: Loss of stakeholder trust

Legal exposure: Potential liability for negligence

Industry examples illustrating common applications

Real organizations use stress tests for operational resilience, regulatory reporting, and vendor risk assessments.

Optica Ventures — COO

Optica ran vendor outage scenarios to validate recovery plans and communication flows.

Outcome: identified single points of failure.
Final result: Board received a concise mitigation roadmap with assigned owners and re‑test dates to close gaps and improve uptime.

Martin Properties — Founder

Martin Properties used stress testing to model rental income shocks during market downturns.

Outcome: prioritized liquidity buffers and lease clauses.
Final result: Property managers adopted new covenant language and a contingency funding plan that reduced cash strain during subsequent market stress.

Representative vendor pricing and feature comparison for eSignature-capable workflows

Cost and feature availability vary by plan; below is a concise comparison showing starting price, trial availability, bulk send, audit trail, HIPAA support, and envelope caps.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7‑day free trial, no credit card	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium)	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No envelope cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Frequently asked questions about the Risk Assessment Stress Test

Answers to common questions about legal validity, eSigning, storage, and revising completed stress tests.

Need help? Contact support

Can the test be signed electronically?
Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states provided intent, consent, attribution, and record retention are present.
When is notarization required?
Notarization is rarely required for internal stress tests. If the test is attached to a legally significant instrument, check state rules; deeds and some affidavits still need notarization.
How long must records be kept?
Retention depends on industry rules: IRS minimum three years (IRC §6501(a)), HIPAA six years (45 CFR §164.530(j)). Maintain records longer when required by state or sector rules.
Who should sign as approver?
An authorized senior manager or officer responsible for the area tested should sign. Document the approver’s role and authority in governance materials.
Can I update a completed test?
Yes. Maintain version control: keep the original, publish a revised copy with a new version number, and document changes and rationale for auditability.
What if data inputs are later found incorrect?
Record the error, rerun affected scenarios, and note corrections in an amendment log. Failure to correct material errors may lead to audit findings or regulatory questions.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now