4. For the purposes of paragraphs 1, 2 and 3, competent authorities shall review the outsourcing agreement between the institution and the third party. Where appropriate, competent authorities may also:
|
(a)
|
interview or require the submission of written statements from any of the following:
|
(i)
|
staff and senior management of the institution;
|
|
(ii)
|
the management body of the institution;
|
|
(iii)
|
the third party to whom the task, activity or function have been outsourced;
|
|
|
(b)
|
review other relevant documents of the institution or the third party.
|