IDC PlanScape : 아웃소싱 직원용 보안

This IDC PlanScape provides guidance by detailing the types of cybersecurity and compliance risks that employee outsourcing may present, as well as actionable strategies and tactics for mitigating those risks."Employee outsourcing can benefit the business in many ways, but it also introduces special cybersecurity and compliance challenges," says Chris Tozzi, adjunct research advisor with IDC's IT Executive Programs (IEP). "Taking steps to contain those risks is a key element of an effective outsourcing strategy."

IDC PlanScape Figure

Executive Summary

Why Is Security for Outsourced Employees Important?

• Reduced Attention to Cybersecurity, Data Privacy, and Governance Standards
• Inconsistent or Insufficient Cybersecurity and Compliance Training
• Less Stringent Background Checks
• Lack of Control Over Worker Location
• Intermixing of Multiple Businesses' Resources
• Limited Ability to Deploy Cybersecurity Tools and Protections
• Reduced Auditing Abilities

What Is Security for Outsourced Employees?

Who Are the Key Stakeholders?

How Can My Organization Take Advantage of Security for Outsourced Employees?

• Define Roles and Risk Tolerances for Outsourced Employees
• Choose Which Functions Not to Outsource
• Factor Cybersecurity and Compliance into Outsourcing Contracts
• Implement Access Controls
• Enable Automated Auditing
• Deploy Network-Level Protections
• Make Documentation and Training Available to Outsourced Workers
• Provide Outsourced Workers with Access to Internal IT Resources

Advice for Technology Buyers

Related Research