Short answer: it depends. I have seen outsourcing models where the legal manufacturer defines and controls the suppliers of components to the outsourced manufacturer. I have also been involved with outsourcing models where the legal manufacturer defers to the outsourced manufacturer on supplier selection and control. In this case, the legal manufacturer only has one supplier to control-- the outsourcing partner. Yes, there are risks of giving up this control but if the legal manufacturer is a small entity without supply chain knowledge, the outsourced manufacturer can provide those services. Bottom line, the legal manufacturer has to decide what makes sense. I would suggest a risk benefit analysis and document the solution in a quality agreement with the outsourced foreign entity.