Responsibility Of Outsourcers

Outsourcing is becoming more complicated as it is explained in Outsourcing And SarbOx. Outsourcers are now being held responsible to make sure their clients are in compliance with Sarbanes Oxley. I think this is ridiculous. How can someone be held responsible for another person’s actions? I understand part of the end product comes from another company and could reduce the costs, especially if they are not in compliance with Sarbanes Oxley. However, shouldn’t the perpetrator be punished instead of the bargain hunter?