evaluation, reporting to the delegator, an inspection of compliance to the agreement and the capability of the delegatee in handling the business workload (concentration risk). 3. There should be a contingency