The SEC recently released a highly specific proposal for registered investment advisers with comments open until at least December 27th. The proposal "would require advisers to conduct due diligence prior to engaging a service provider to perform certain services or functions. It would further require advisers to periodically monitor the performance and reassess the retention of the service provider in accordance with due diligence requirements to reasonably determine that it is appropriate to continue to outsource those services or functions to that service provider."
My immediate reaction is that I'm generally in favor of RIAs performing appropriate due diligence, but that I'm a bit skeptical about the need for specific rules in a principles-based framework. It's certainly true that Advisers outsource a significant amount of work today. And it is also true that, as the proposal details, problems at third party service providers have led to broader problems.
It's easy to see how concentration risk can grow in such an environment. If a huge swath of the market outsources to a particular third-party firm, a failure at the third party could paralyze the market.
It'll be interesting to watch to see how RIAs react to this.