Provides guidance on managing the risks that may arise from outsourced relationships, including responsibilities, risk assessment, due diligence, contracts, security and confidentiality, controls, business resumption, and monitoring.