Practical Guide for IT Outsourcing

Practical Guide for IT Outsourcing
a HandiGuide®

The Practical Guide for IT Outsourcing is delivered electronically in WORD and/or PDF format.  The word version of the template was recently updated to utilize CSS a style sheet.

Included with the template is a 3 page Job Description for the Manager Outsourcing, the most recent version of the Business and IT impact Questionnaire, and an ISO 27001 and ISO 27002 audit program. The Outsourcing template address Sarbanes-Oxley and HIPAA directly. 

As you start an Outsourcing Process there are many factors to consider before you past a point of no return. Examples of these are:

  • If your enterprise is going through periods of rapid or dramatic change, including changes in the way you do business, how will outsourcing impact this?

  • Your enterprise's IT function is efficient and has a low cost of operation, what value will the outsourcer provide?

  • The primary motivator for outsourcing is the drive to reduce costs, why could you not do the same internally?

  • The enterprise does not have the management talent or competency to plan and manage the outsourcing process and outsource provider, how will you know that you are getting value from your outsourcer

  • Outsourcing is being driven by senior management that does not have a strategic vision of where the enterprise is going, is the driver behind this move someone who thinks this is the "in" thing to do

  • Internal costs of the IT function are not fully understood, how will you know that you are getting the most cost effective solution from your outsourcer?

  • Performance metrics are not well defined for the IT function, how do you know that the service provided by your outsourcer will be as good if not better than what the enterprise is getting today?

  • The enterprise operations are entwined with IT functions such that if the IT function is outsourced a significant amount of core enterprise functionality and operational knowledge will have to be transferred to the outsourcer, will the outsourcer have a large "learning curve"

  • The enterprise's strategic plan has not been defined with all of the outsourcing implications defined, is it possible that outsourcing is not in the best interest of the enterprise's operation?

 

All of these questions are addressed in the Practical Guide for IT Outsourcing.  The guide is over 120 packed pages and includes everything needed to plan for, negotiate, and manage an outsourcing process within an enterprise.  The electronic document includes:

  • Outsourcing Management Standard Overview of outsourcing, Service Level Agreements and responsibilities.

  • Outsourcing Policy Standard Policy that can be used to determine when outsourcing is an option.

  • Outsourcing Approval Standard Process which can be used in approving an outsourcing agreement.  Includes a process flow chart on steps to a successful outsourcing agreement.

  • Sample Service Level Agreement Includes a several sample service level agreements.

  • Service Level Agreement Metrics Definition of over 150 metrics presented in 18 tables that can be used to manage an outsourcing vendor.

  • Outline for Contract Negotiation  Over 17 pages which issues to be addressed including service to be provided, service level requirements, term of the agreement, enterprise's facilities, enterprise's equipment (owned/leased), intellectual property, third party service providers, IT application project (current / future), responsibilities, training and conversion to mention a few.

  • Base Case Development Detail listing of factors to include

  • Mutual Non-Disclosure Template Template that can be used to create an enterprise's own document for use with outsourcing vendors.

  • Job Description for Manager Outsourcing (3 pages long)

  • Business & IT Impact Questionnaire - Inventory and assess all application - addresses Sarbanes-Oxley Compliance issues.

  • ISO 27001 & 27002 Security Process Audit Checklist

  • HIPAA Audit Program Guide

 

Internet and IT Job Descriptions    Metrics for Interenet and IT