September 6, 2011
Show AI Summary
Outsourcing risk management requires Board-approved policies and prohibits outsourcing core management functions by banks to manage service-provider risks.
Reserve Bank guidelines require banks to adopt a Board-approved comprehensive policy for outsourcing, detailing services, selection criteria, parameters for material outsourcing, delegation of authority, and monitoring systems; they prohibit outsourcing of core management functions including internal audit, compliance, KYC decision-making, loan sanctioning and investment portfolio management, while leaving the decision to outsource to bank discretion subject to commercial and risk considerations.