Purpose
Capture the CBCS outsourcing guideline as an authoritative source for BCMS outsourcing governance, third-party risk management and outsourcing control requirements.
Authority
- Publisher: Centrale Bank Curacao & Sint Maarten (CBCS)
- Document title: Guideline for the Sound Management of Outsourcing
- Source page: https://www.centralbank.cw/legislation-guidelines/general-guidelines
- Document URL: https://centralbank.cw/storage/app/media/legislation_guidelines/General_guidelines/20250924_guideline_for_the_sound_management_of_outsourcing.pdf
- Publication date: 2025-09-24, inferred from the official CBCS filename and pending confirmation against the PDF cover page
- Authority level: CBCS general guideline
Summary
This source will be used to derive BCMS requirements for outsourcing arrangements, including governance, accountability, materiality assessment, risk assessment, service-provider due diligence, contractual safeguards, ongoing monitoring, business continuity, exit planning and regulatory access.
The PDF link and title were verified from the official CBCS General Guidelines page. Theme-level extraction has been completed into linked BCMS requirements; final approval still requires human review against the official PDF.
Relevant Provisions
Detailed extraction completed at requirement-theme level. Exact article-level wording remains in the official PDF; BCMS requirements derived from this source are linked in frontmatter.
Extracted provision themes:
- Outsourcing governance and board or senior management accountability
- Materiality assessment for outsourced activities
- Risk assessment and due diligence before outsourcing
- Written outsourcing agreements and minimum contract terms
- Ongoing monitoring of outsourced service providers
- Data protection, confidentiality and security requirements
- Business continuity, contingency and exit planning
- Sub-outsourcing controls
- Regulatory notification, access, audit or supervisory information rights
Relationships
- Derived requirements: REQ-OUT-001 through REQ-OUT-011
- Related policies: POL-OUT-001 Outsourcing Risk Management Manual
- Related process: PRC-GRO-001 Governance Risk and Outsourcing
- Related procedures: PROC-OUT-001 Classify Outsourcing Arrangement, PROC-OUT-002 Perform Outsourcing Due Diligence and Risk Assessment, PROC-OUT-003 Obtain Outsourcing Approval and CBCS Engagement, PROC-OUT-004 Review and Execute Outsourcing Agreement, PROC-OUT-005 Monitor Outsourcing Arrangement, PROC-OUT-006 Maintain Outsourcing Register and Reporting, PROC-OUT-007 Manage Outsourcing Continuity Exit and Sub-Outsourcing
- Related controls: CTRL-OUT-001 Ensure Outsourcing Is Classified Before Engagement, CTRL-OUT-002 Ensure Due Diligence and Risk Assessment Is Completed, CTRL-OUT-003 Ensure Required Approval and CBCS Engagement Is Completed, CTRL-OUT-004 Ensure Written Agreement Contains Outsourcing Safeguards, CTRL-OUT-005 Ensure Outsourcing Register Is Complete and Current, CTRL-OUT-006 Ensure Outsourcing Monitoring and Annual Review Occurs, CTRL-OUT-007 Ensure Continuity Exit and Sub-Outsourcing Safeguards Exist, CTRL-OUT-008 Ensure CBCS Outsourcing Reporting Is Completed
- Related system: SYS-OUT-001 Outsourcing Register
- Related publication: PUB-OUT-001 Outsourcing Risk Management Manual
- Related issue: ISS-OUT-001 Complete Outsourcing Operating Artifacts and Evidence
Assurance
- Current version verified: yes, official CBCS General Guidelines page lists the PDF
- PDF content extracted: yes
- Applicability confirmed: review pending
- Local PDF stored in BCMS: no
History
- 2026-07-25: Created source object from official CBCS General Guidelines page and PDF link.
- 2026-07-25: Extracted outsourcing provision themes and linked derived requirements REQ-OUT-001 through REQ-OUT-011.
- 2026-07-25: Linked outsourcing process, procedures, controls, system, publication and implementation issue.