With outsourcing becoming very popular, has your strategic focus changed from previous years?
Yes it changed, via becoming popular, outsourcing made certain technologies and services a commodity, so to be on the edge and to be able to deliver value added services, we had to move our technology, process and services focus, and address subjects, such as:
- SLA based services
- Agile Processes
- Web 2.0
- Service Oriented Architecture
- Open Source Component Usage/Open Source Licensing issues
- IP Protection
- Security Concerns
Beyond just following the standard advice of formulating your security requirements and including them in your due-diligence questionnaire and in the contract, go beyond that. Include the possibility of auditing the security regularly at the provider’s premises, request IDS (Intruder Detection System) installation and have the logs of it sent to you regularly, require usage of source code scanning software to detect IP rights infringements and select your outsourcing destination based on your regulatory and compliance requirements, outsourcing to EU and inside NATO for example provides a much higher regulatory and security compliance then to outsource to India for example, this is one of the reasons EPAM follows a geo-diverse growth strategy to be able to serve our clients in jurisdictions/geographies, which best suit their needs.
And before starting the first engagement, go and look for yourself, do the first audit, everything looks perfect on PowerPoint.
Don’t forget about business and disaster recovery, look and ask for records of DR testing, check infrastructure availability statistics and records (electricity, internet connectivity and availability, phone availability, server availability).
What are your clients most worried about?
In the last 6 to 12 months, clients are getting more worried about staff turnover and security, mostly because of their experience with India, where staff turnover reached critical level, compared to less 10%, which is maintained by EPAM in the last 5 years.
Reading our newsletter every Monday will keep you up-to-date with security news.
Receive a daily digest of the latest security news.