OSFI Issues Final Revised Guideline B-10 on Outsourcing of Business Activities, Functions and Processes

March 11, 2009, Ottawa – OSFI has released a final revised version of Guideline B-10, Outsourcing of Business Activities, Functions and Processes, which sets out OSFI’s expectations for federally regulated entities (FREs) that outsource one or more of their business activities to a service provider.

On April 20, 2007, a federally regulated entity will no longer need to obtain the approval of the Superintendent to maintain and process outside Canada information or data relating to the preparation and maintenance of certain corporate, accounting and customer records. The revisions to Guideline B-10 primarily clarify OSFI’s expectations.

The Guideline includes, among others, the following revisions from the December 2003 Guideline.

  • The Guideline provides FREs with a transition measure to bring outsourcing arrangements that are obtained as part of an acquisition by the FRE into compliance with the Guideline.
  • The Guideline clarifies the expectation that, as part of the FRE’s materiality test, a FRE would need to consider the potential influence on the FRE of multiple outsourcing arrangements with a single service provider.
  • The Guideline clarifies the expectation that the FRE should ensure that the service provider regularly tests its business recovery system as it pertains to the outsourced activity, and that the FRE should ensure that a service provider addresses any material deficiencies. The Guideline further adds that a FRE may be asked by OSFI to provide a summary of the test results that pertain to the outsourced activity.
  • The Guideline clarifies that the FRE will receive a notice from OSFI if OSFI chooses to exercise its audit rights.
  • The Guideline includes a standardized template for a centralized list that FREs could use to summarize all material outsourcing arrangements.
  • The Guideline clarifies OSFI’s expectation that the FRE’s review of the service provider’s ability to continue to deliver the service, in the manner expected, be commensurate with the level of risk involved.

OSFI does not expect the revised Guideline will necessitate changes to existing contracts that a FRE has in place with service providers, or substantive amendments to policies and procedures. As such, no new transition period is suggested for compliance with the revised Guideline.

The Guideline and the complete accompanying letter are available at http://www.osfi-bsif.gc.ca/osfi/index_e.aspx?ArticleID=2886

About OSFI

OSFI is an independent agency of the Government of Canada. It reports to the Minister of Finance. For more information visit www.osfi-bsif.gc.ca.