Article 18 8

(a)

the establishment of outsourcing relationships, including any subsequent outsourcing relationship, in accordance with this Article, their governance and procedures for monitoring the implementation of functions by the service provider and in particular those functions that are to be regarded as critical;

(b)

the roles and responsibility of the obliged entity and the service provider within an outsourcing agreement;

(c)

supervisory approaches to outsourcing as well as supervisory expectations regarding the outsourcing of critical functions.