Outsourcing and Offshore Risk
The Outsourcing and Offshore Risk project has now been launched, which will produce a report in early December 2008.
About
This project aims to develop a practical, authoritative guideline for user organisations based on actual, real-world experience.
Very little guidance is currently available. One or two excellent guidelines have recently been published by authorities, such as CPNI and Intellect. But they are primarily concerned with setting out the activities and controls that need to be considered at each stage of the process, rather than capturing the critical success factors and key learning points from major outsourcing exercises.
The aim is to identity and consider good practices developed by KTN member organisations in planning, defining, negotiating and managing out-sourced or off-shored IT and business services.
Interviews are being held with experienced security, IT, legal and procurement specialists from both user and service organisations.
Emphasis will be placed on the "softer" issues, such as relationship management and cross-organisational processes, rather than standard legal or contractual aspects, which are well covered by existing guidelines.
The project will deliver a practical guide that can be used by both security managers and commercial managers to ensure good security practices are embedded in contracts and management processes.
The Project will proceed in three stages:
- Firstly, a fact-finding exercise to identify and gather sources of good practice in out-sourcing and off-shoring. This will be based on research and interviews.
- Secondly, a workshop distillation and discussion of findings with invited KTN member organisations.
- Thirdly, the development of a concise but comprehensive guideline setting out recommended practices.
The primary deliverable will be a six to seven page guideline in plain English aimed at security practitioners, their management and their commercial or legal advisers. The guideline will be suitable for both public and private organisations.
Useful research notes and collected examples of working practices will also be made available, subject to the approval of the contributors.
All offers of advice and support are welcomed, and will be followed up.
Latest updates
Found 2 articles.
| Date: 5/2/2009 |
The KTN is pleased to make available for download the outputs from the 2008 Funding Competitions. These are: a report into managing security in outsourcing and offshoring by David Lacey, and a report into Service Oriented Architecture security by Ulrich Lang.
Both reports are in PDF format. For more information, see the links below.
| Date: 5/12/2008 |
The KTN Christmas meal took place at Bletchley Park yesterday, during which the 08 Funding Competition winners presented their work. These presentations are now available to download.
| Page 1 of 1 |
