Paragraph 31 Control of out-sourced processesF1
For the purposes of paragraph 27(3)(f), where the maritime operator outsources one or more data flow activities or control activities referred to in paragraph 27(1), it must—
(a)
check the quality of the outsourced data flow activities and control activities in accordance with this Schedule;
(b)
indicate appropriate requirements for the outputs of the outsourced processes as well as the methods used in those processes;
(c)
check the quality of the outputs and methods referred to in sub-paragraph (b);
(d)
ensure that the outsourced activities are carried out in such a manner that those are responsive to the inherent risks and control risks identified in the risk assessment referred to in paragraph 27(1).