https://www.ifsqn.com/forum/index.php/topic/19354-outsourced-processing-requirements-for-brc-section-354/