1. Where a CSD outsources services or activities to a third party, it shall remain fully responsible for discharging all of its obligations under this Regulation and shall comply at all times with the following conditions:

(a) outsourcing does not result in the delegation of its responsibility;

(b) the relationship and obligations of the CSD towards its participants or issuers are not altered;

(c) the conditions for the authorisation of the CSD do not effectively change;

(d) outsourcing does not prevent the exercise of supervisory and oversight functions, including on-site access to acquire any relevant information needed to fulfil those functions;

(e) outsourcing does not result in depriving the CSD of the systems and controls necessary to manage the risks it faces;

(f) the CSD retains the expertise and resources necessary for evaluating the quality of the services provided, the organisational and capital adequacy of the service provider, for supervising the outsourced services effectively and for managing the risks associated with the outsourcing on an ongoing basis;

(g) the CSD has direct access to the relevant information of the outsourced services;