This study explains the role of the Data and Safety Monitoring Board (DSMB). The confidential nature of DSMB deliberations dictates that no indication of efficacy be made available to investigators or study participants. Which seems to indicate the CRO is not involved in the decision.
https://academic.oup.com/jlb/article/6/1/51/5...login=true