Global IT Sourcing and Data Security
By Alice Khosravy
Data security is one of the main concerns of IT managers who are outsourcing to a global sourcing provider for the first time. Intellectual property is one of the most valuable assets that a company will possess and therefore extra steps should be taken to protect it. The risk of data theft can be greatly reduced if precautionary steps are taken before sending IT projects to a vendor.
An outsourcing company should consider many different factors when choosing a global IT partner. Among these criteria should be data security. It is important to find out the data security policies of the vendor and identify access controls. Clear, enforceable policies must be established. Frequently, the larger vendors will have certifications showing that information security practices are upheld, such as the ISO 27001 certification that is achieved when the company documents and follows information security practices and controls.
An outsourcing company should take the time to look into how the global sourcing provider enforces access controls and how these controls are modified when employees change positions internally or leave the company. Many vendors will provide development on a dedicated data server, which will include audit control access. Even after a vendor is chosen, IT managers must still ensure that the vendor follows the outsourcer's industry best practices and compliance guidelines.
The outsourcing contract should reflect the policies discussed with the vendor and the access controls. A signed non-disclosure agreement, non-compete agreement and no solicitation agreement can provide additional security for the outsourcing company. A red flag should be raised if the vendor refuses to include data protection information in the contract and a different global sourcing provider should be chosen. Regular audits should be conducted by the outsourcing company to make sure the policies are being enforced, even after the initial terms are agreed upon and the contracts are signed.
Another way to protect propriety information is to only provide data that is relevant to the project. The minimal amount of information should be shared with the vendor. The outsourcing company should thoroughly review propriety data and technology that are needed for the project development. It should be clearly communicated to in-house employees regarding what information is acceptable to be shared with the global sourcing partner.
Data protection is possible when sending work to a global IT sourcing partner. It is well worth it to take the necessary time to ensure that vital information will be protected.
About the author
A&E Consulting is a full service consulting firm that has been successfully helping clients with their global needs. Visit http://www.globalsourceyourit.com or call 818-572-8399 for more information. from http://www.FreeArticlesAndContent.com
|
|
Copy This Article
For FREE!!!
You can use this article and copy it on your own website
for free! All you have to do is make sure the article
is copied with no changes and includes the "About
The Author" text. Also please ensure that all url's
are hyperlinked according. Thank you. |
Link To This Article - And We'll
Link Back To Your Website!
You are more then welcome to link to this article! All
you have to do is copy this webpage address from the
address bar and create a link on your website. Please
use the title of this article for your link text. Please
get in contact once you have linked to this article
and we'll link back to you! Thank you. |
|
|
|
Other great articles from this category...
|
Related Sites
|
|
