2004-01-01
The Registrar of Banks issued Circular 14/2004 to establish guidelines for banks regarding the outsourcing of critical functions that impact risk profiles or supervisory processes. The document mandates comprehensive service-level agreements, rigorous supplier monitoring, contingency planning, and unrestricted supervisory access to information for both external and internal group outsourcing. It explicitly prohibits outsourcing compliance functions and generally opposes outsourcing internal audit functions, while requiring banks to report proposed and existing arrangements to the regulator by specific deadlines.