Documenting Oversight is usually a function of your Risk Assessment to determine. The EMA IWG gives some slight guidance in their Q & A :- " The sponsor/CRO should determine the extent of monitoring of each party, within the context of GCP, under particular circumstances. This should be justifiable, and ensure GCP compliance, in the context of the clinical site organisation and the nature of the product and protocol being studied. "