1.An APA or ARM that arranges for activities to be performed on its behalf by third-party service providers, including undertakings with which it has close links, shall ensure that the third-party service provider has the ability and the capacity to perform those activities reliably and professionally.
An APA or ARM shall specify which of the activities are to be outsourced, including a specification of the level of human and technical resources needed to carry out each of those activities.
2.An APA or ARM that outsources activities shall ensure that the outsourcing does not reduce its ability or power to perform senior management or management body functions.
(a)that it assesses whether the third-party service provider carries out outsourced activities effectively and in compliance with applicable laws and regulatory requirements and adequately addresses identified failures;
(c)adequate control procedures with respect to outsourced activities, including effectively supervising the activities and their risks within the APA or ARM;
For the purposes of point (d), the APA or ARM shall obtain information on the business continuity arrangements of the third-party service provider, assess its quality and, where needed, request improvements.
4.An APA or ARM shall ensure that the third-party service provider cooperates with ESMA or, where relevant, the national competent authority, in connection with outsourced activities.