In this situation the process control criteria should already have been defined, and can be transposed into requirements for the supplier of the outsourced process, if necessary.