A Bank must establish appropriate policies and processes to assess, manage and monitor outsourced activities. Any outsourcing arrangements entered into by a Bank must be subject to appropriate due diligence, approval and ongoing monitoring in order to identify and mitigate risks inherent to outsourcing. Governance requirements for outsourcing are contained in a separate Regulation and Standards issued by the Central Bank.