OM-3.2.4
Once an outsourcing arrangement has been implemented, the Central Bank requires a licensee to continue to monitor the associated risks and the effectiveness of its mitigating controls. It will verify this through the course of its normal on-site and off-site supervisory processes, such as prudential meetings and on-site examinations. The Central Bank also requires access to the outsourced activity, which it may occasionally want to examine itself, through management meetings or on-site examinations.
October 07