Outsourcing services to a third-party vendor is a widely accepted practice in today's world for two major reasons. One of them is the tremendous savings in cost and the other is to avail the service of experts in the field.
CISA aspirants should be aware of the following important terms with respect to outsourcing:
- Insourced: Activities performed by the organization's own staff
- Outsourced: Activities performed by the vendor's staff
- Hybrid: Activities performed jointly by staff from both the organization and the vendor
- Onsite: Staff working onsite in the IT department
- Offsite: Staff working from remote locations in the same geographical area
- Offshore: Staff working from remote locations in different geographical areas
Evaluation criteria for outsourcing
CISA aspirants should understand the evaluation criteria for the outsourcing of any function. The following functions should not be outsourced:
- The core functions of the...