We are currently debating this very topic (outsourcing or doing this internally). Can I get information on this module? Also, how often are you performing your Compliance Risk Assessment? What about a Fair Lending Risk Assessment ? Is that done in conjunction with your Compliance Risk Assessment and if so how frequently?