Article 22 4

4.   A SIPS operator shall have a comprehensive outsourcing framework in place to effectively identify, monitor and manage the risks arising from any outsourcing and throughout its whole lifecycle. The SIPS operator shall also have in place an outsourcing strategy that takes into account the risk tolerance of the SIPS operator.