OM-3.4.2
The risk assessment must — amongst other things — include an analysis of:
  (a) The business case;
  (b) The suitability of the outsourcing provider; and
  (c) The impact of the outsourcing on the licensee's overall risk profile and its systems and controls framework.
  Amended: July 2011
October 07
October 07
 
  
        