The Chairman of the IOSCO Technical Committee, Mr. Andrew Sheng, said that “The results of our survey on outsourcing indicate that financial intermediaries are outsourcing significant aspects of their business activities to service providers. By promulgating these Principles on outsourcing, we have created a framework that will assist regulated entities in determining the steps they should take when considering outsourcing activities. We believe that the seven IOSCO Principles will provide a flexible and practical approach that firms can use to guide their outsourcing practices in order to promote effective controls, business continuity, investor protection and supervisory access to books and records.”
The Outsourcing Principles cover seven areas. These include the due diligence process in selecting a service provider, the contract with a service provider, business continuity issues, client confidentiality, concentration of outsourcing services, termination procedures and access to books and records. The Principles also make clear that the Principles should be applied according to the degree of materiality of the outsourced activity.
Central to the Outsourcing Principles are a set of performance standards that provide that the outsourcing firm, its management and governing authority must retain full legal liability and accountability to the regulator for all outsourced functions. Moreover, the outsourcing firm must retain the competence and ability to ensure that the firm complies with regulatory requirements.
In developing the Outsourcing Principles, IOSCO worked closely with the Joint Forum, which also released a report on Outsourcing. The two organizations have worked closely to ensure that their complementary sets of principles are consistent with each other. The IOSCO principles are designed specifically for intermediaries in the securities sector, whereas the Joint Forum principles are high level and aimed collectively at the banking, insurance and securities sectors. They are designed to provide a benchmark against which all financial institutions can gauge their approach to outsourcing.