Answer:
As with any outsourced product or service, compliance is the responsibility of the bank. You can outsource a function, but if the outsourced product or service doesn’t meet expectations, it’s your responsibility. Through contracts you may have some recourse against your solution provider for non-compliance, but it’s in your bank’s best interest to measure your solution provider’s services and security to ensure expectations are met.
-----------------------------
Learn more about Rayleen Pirnie’s webinar Mobile Services Risk Management