Notwithstanding that the operation or maintenance of information assets, systems and network are outsourced to a third-party service provider, the licensee remains responsible for ensuring compliance with the requirements specified in this Module.