Once an activity has been outsourced, ancillary service providers must continue to monitor the associated risks and the effectiveness of its mitigating controls. Ancillary service providers must inform its normal supervisory contact at the CBB if material problems are encountered with the outsourcing provider. The CBB may direct the ancillary service providers to make alternative arrangements for the outsourced activity.
Added: December 2018