Related provisions for SYSC 13.9.8
1 - 5 of 5 items.
Before entering into, or significantly changing, an outsourcing arrangement, a firm should:(1) analyse how the arrangement will fit with its organisation and reporting structure; business strategy; overall risk profile; and ability to meet its regulatory obligations;(2) consider whether the agreements establishing the arrangement will allow it to monitor and control its operational risk exposure relating to the outsourcing;(3) conduct appropriate due diligence of the service
In negotiating its contract with a service provider, a firm should have regard to:(1) reporting or notification requirements it may wish to impose on the service provider;(2) whether sufficient access will be available to its internal auditors, external auditors or actuaries (see section 341 of the Act) and to the appropriate regulator (see SUP 2.3.5 R (Access to premises) and SUP 2.3.7 R (Suppliers under material outsourcing arrangements);(3) information ownership rights,
A firm should establish and maintain appropriate systems and controls for the management of operational risks that can arise from employees. In doing so, a firm should have regard to:(1) its operational risk culture, and any variations in this or its human resource management practices, across its operations (including, for example, the extent to which the compliance culture is extended to in-house IT staff);(2) whether the way employees are remunerated exposes the firm to the
An authorised fund manager carrying out due diligence for the purpose of the rules in this section should make enquiries or otherwise obtain information needed to enable him properly to consider:(1) whether the experience, expertise, qualifications and professional standing of the second scheme's investment manager is adequate for the type and complexity of the second scheme;(2) the adequacy of the regulatory, legal and accounting regimes applicable to the second scheme and its