OCC maintains that banks cannot abdicate responsibility when outsourcing crypto services and must conduct thorough due diligence, enforce risk management frameworks, and monitor compliance standards across all third-party engagements

Claim

Quotes that support claims

Third-party providers must follow proper controls to protect customer assets. Banks remain responsible for the oversight of all outsourced services.