Guidelines on Outsourcing of Activities by Intermediaries
Show AI Summary
Outsourcing risk management requires board approved policies, due diligence, binding contracts and regulator access for outsourced services.
SEBI requires intermediaries to adopt Board approved outsourcing policies and a comprehensive risk management programme, refrain from outsourcing core business and compliance functions, and complete a self assessment of existing arrangements. Intermediaries must conduct due diligence on third parties, preserve central records, mandate legally binding contracts specifying service levels, monitoring, confidentiality, IT security, business continuity, exit rights and regulator access, and remain fully liable and accountable for outsourced activities while ensuring investor protection and reporting suspicious transactions to the Financial Intelligence Unit.