Spin-Off / Outsourcing Officer
Governance of outsourced functions and material service providers at the insurer. Risk assessment before outsourcing, contractual safeguards and audit rights, ongoing monitoring per MaGo and EIOPA guidelines.
VAG § 47 · MaGo · EIOPA guidelines
Talk to us about Spin-Off / Outsourcing Officer
Three lines and you are in our inbox. We reply within one business day.
What is a Spin-Off / Outsourcing Officer?
A Spin-Off / Outsourcing Officer (Ausgliederungsbeauftragter) governs the outsourcing of functions and the use of material service providers at an insurance undertaking, within the governance system required by the Insurance Supervision Act (VAG). Outsourcing itself is governed by Section 32 VAG, supplemented by the supervisory minimum requirements for governance (MaGo) issued by BaFin and the relevant EIOPA guidelines on outsourcing and system of governance. The duty to notify the supervisor sits elsewhere, in Section 47 numbers 8 and 9 VAG.
Under Section 32 paragraph 1 VAG an undertaking that outsources functions or insurance activities remains responsible for meeting every supervisory rule. Section 32 paragraph 2 VAG protects the board's ability to steer and control and the supervisor's audit rights, including data access, the provider's cooperation with the supervisor and access to its premises. For important functions, Section 32 paragraph 3 VAG adds that the quality of governance must not be materially impaired, operational risk must not rise unduly, and service to policyholders must not be put at risk.
Before an outsourcing is entered into, the officer ensures a documented risk assessment: whether the function is important, the risks involved, the suitability of the provider, and any concentration or sub-outsourcing concerns. The agreement must then secure the information and instruction rights required by Section 32 paragraph 4 VAG and bring the function into the undertaking's risk management; where an important function goes to a provider in a third country, the contract must name a domestic agent for service. That assessment belongs before signature. Done late, it leaves no evidence that the choice of provider rested on a risk view, and the leverage to negotiate audit rights is already gone.
Once live, the relationship is monitored continuously: service levels, the provider's continued suitability, sub-outsourcing changes, and incidents. The intention to outsource important functions is notified to the supervisor under Section 47 number 8 VAG together with the draft contract, and later material circumstances under Section 47 number 9 VAG. The officer maintains an outsourcing register and the evidence that each arrangement was assessed, contracted and monitored in line with Section 32 VAG, MaGo and the EIOPA guidelines. Recurring findings concern the gaps between those steps: services bought as consultancy and never classified, monitoring reports that only restate the provider, and exit provisions with no named alternative. Credit institutions run a comparable function under a separate framework, where the German term is Auslagerung.
Duties of the Outsourcing Officer
- Assess and document, before outsourcing, whether a function is important under Section 32 paragraph 3 VAG and MaGo.
- Conduct pre-outsourcing risk and provider due-diligence assessments.
- Ensure the agreement secures the information and instruction rights under Section 32 paragraph 4 VAG and the supervisor's audit rights under Section 32 paragraph 2 VAG.
- Maintain the outsourcing register of all material arrangements and service providers.
- Notify the intention to outsource important functions under Section 47 number 8 VAG with the draft contract, and later material circumstances under Section 47 number 9 VAG.
- Monitor service levels, provider suitability and sub-outsourcing changes on an ongoing basis.
- Assess concentration risk and dependence on individual providers.
- Ensure exit and contingency arrangements are defined and remain workable.
- Coordinate with risk management, compliance and internal audit on outsourced functions.
- Report on the outsourcing portfolio to the management board and document the monitoring.
Appointment and qualification
Responsibility for the governance of outsourcing rests with the management board of the insurance undertaking. The VAG requires an effective system of governance, and MaGo expects clear responsibility for outsourcing within it. Many undertakings concentrate this in an outsourcing officer or central outsourcing management function, although the board cannot delegate away its own responsibility under Section 32 paragraph 1 VAG. Unlike the banking regime, where MaRisk AT 9 expressly requires a central outsourcing officer, the insurance framework names no single person; ownership still has to be assigned clearly.
There is no single fixed appointment date; the need arises as soon as the undertaking outsources, or plans to outsource, functions, particularly those that are important within the meaning of Section 32 paragraph 3 VAG. From that point there must be clear ownership of the pre-outsourcing assessment, the contractual safeguards and the ongoing monitoring. Lead time has to be planned in, because the intention to outsource must be notified under Section 47 number 8 VAG before the arrangement takes effect and with the draft contract attached.
The qualification is functional. The officer needs a sound understanding of the undertaking's operations and risk profile, the outsourcing requirements of Section 32 VAG, MaGo and the EIOPA guidelines, and the contractual and monitoring tools to apply them. Independence of judgement matters, since the officer must be able to flag arrangements that do not meet the requirements. The scope of the role scales with the size and complexity of the outsourcing portfolio: a small undertaking with limited outsourcing needs less structure than a large insurer with extensive material arrangements and sub-outsourcing chains.
- Entering into a new outsourcing of an important function under Section 32 paragraph 3 VAG.
- Material change to an existing outsourcing arrangement or provider.
- Onboarding a new material service provider.
- A provider introducing or changing sub-outsourcing.
- Findings from monitoring, incidents or supervisory feedback.
- Updated MaGo or EIOPA guidance affecting outsourcing governance.
Where the role is needed
- Life insurance undertakings
- Non-life and property-casualty insurers
- Health insurance undertakings
- Reinsurance undertakings
- Pension funds (Pensionskassen) and Pensionsfonds
- Insurance groups with shared service and outsourcing structures
- Specialty and run-off insurers relying on external administration
How CIVAC supports the Outsourcing Officer role
CIVAC turns the outsourcing portfolio into a maintained register rather than a folder of contracts. Each arrangement can carry its classification as critical or important, the pre-outsourcing risk assessment, the contractual safeguards and audit rights, and the monitoring status, so the governance of every provider is visible in one place. The documentation pillar holds the assessment and contract evidence retrievably for the management board, internal audit and the supervisor. Tasks route recurring duties, such as annual provider reviews, audit-right exercises and supervisory notifications, to the responsible owner with reminders, so monitoring does not lapse. CIVAC also makes coverage and accountability clear, showing who owns each material outsourcing under § 32 VAG, MaGo and the EIOPA guidelines.
Frequently asked questions
Need this officer role for your organisation?
Appoint our experts as your external officer or license CIVAC for your in-house team. Get in touch and we walk you through the right setup.