(Art. 52 para. 2 FinSA)
The reviewing body may only delegate activities of minor significance to third parties.
The third parties must have the necessary skills, knowledge and experience to perform the delegated activities.
The reviewing body shall carefully instruct and monitor the appointed third parties.
Delegation must be agreed in writing or in another form demonstrable via text. The contract must define in particular:
the access and audit rights of the reviewing body and FINMA;
the permanent availability of data and readiness to deliver them to the reviewing body;
the person responsible for the outsourced function at the audit body.