Credit unions and mutuals are increasingly outsourcing non-core specialist functions. APRA recognises the risks associated with outsourcing material activities and gave guidance to ADI's in APS 231 in respect of the outsourcing agreement itself.
Risks
Outsourcing, or the contracting out of a business activity, does not transfer all of the risks associated with that activity to the service provider. The services remain the responsibility of the organisation, which must ensure that all risks associated with the business activity are addressed in the same way as if the activity was performed by the organisation.
The organisation must agree with the service provider on the processes that will be in place for the monitoring, reporting and reviewing of services provided to the organisation.
The organisation must ensure that the service provider adheres to the organisation’s relevant policies and procedures. The organisation must also ensure that the service provider has staff who are sufficiently trained and competent to provide the services.
Print This Post
Posted 28th December 2008 by David Jacobson in Legal
