Outsourcing - Resource Management - Lecture Notes, Study notes of Human Resource Management

Outsourcing, Companies Outsource, Drivers of Outsourcing, Internal Headcount, Internal Capacity, Internal Manufacturing, Service Performance, Strategic Process, Legal Or Environment, Internal Capacity are some important points from lecture handout of Resource Management.

Typology: Study notes

2011/2012

Uploaded on 12/20/2012

devashish
devashish 🇮🇳

4.3

(24)

111 documents

1 / 3

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Why is Outsourcing Important?
Expected 8.1% rise in outsourcing worldwide in 2008
In 2007 IT work was the number 1 outsourced service
75% of U.S. companies outsourced some type of IT activity in 2004
Why Companies Outsource?
Drivers of Outsourcing – Protiviti/APIC Survey –
29% - Cost or internal headcount needs to be reduced
22% - Internal capacity is constrained by increasing market demand
20 % - Internal manufacturing or service performance is insufficient
19% - Strategic process
6% - Regulatory, legal or environment
4% - Internal capacity underutilized
(http://www.isaca.org/Content/ContentGroups/Journal1/20058/jpdf0505-Outsourcing-BA-Risk-
Manage.pdf)
Disadvantage of Outsourcing
Companies may not fully understand the actual work that is outsourced
This could affect cost and satisfaction with end product or service
PwC 2007 Global Outsourcing Survey found that less than one third of companies who
outsourced were completely satisfied, but 91% said they would continue to outsource
Categories of Outsourced IT Activities
Software Development
Application Support & Maintenance
Infrastructure Management Services
Audit of Outsourcing
The objective of an audit of outsourcing is to determine whether:
Risks associated with outsourcing are mitigated
Objectives of outsourcing are being met
IT strategy has been modified to make best use of outsourcing
Risks of Outsourcing:
Business Risks:
Outsourcing undesirable functions versus the ones that will provide the greatest competitive
advantage
Costs of outsourcing
Not having defined goals and objectives carried over to the service provider
Contract improperly prepared or structured
Flexibility limitations in the future
Going concern
SAS 70
Docsity.com
pf3

Partial preview of the text

Download Outsourcing - Resource Management - Lecture Notes and more Study notes Human Resource Management in PDF only on Docsity!

Why is Outsourcing Important?

• Expected 8.1% rise in outsourcing worldwide in 2008

• In 2007 IT work was the number 1 outsourced service

• 75% of U.S. companies outsourced some type of IT activity in 2004

Why Companies Outsource? Drivers of Outsourcing – Protiviti/APIC Survey –

  • 29% - Cost or internal headcount needs to be reduced
  • 22% - Internal capacity is constrained by increasing market demand
  • 20 % - Internal manufacturing or service performance is insufficient
  • 19% - Strategic process
  • 6% - Regulatory, legal or environment
  • 4% - Internal capacity underutilized (http://www.isaca.org/Content/ContentGroups/Journal1/20058/jpdf0505-Outsourcing-BA-Risk- Manage.pdf)

Disadvantage of Outsourcing

• Companies may not fully understand the actual work that is outsourced

• This could affect cost and satisfaction with end product or service

• PwC 2007 Global Outsourcing Survey found that less than one third of companies who

outsourced were completely satisfied, but 91% said they would continue to outsource

Categories of Outsourced IT Activities

• Software Development

• Application Support & Maintenance

• Infrastructure Management Services

Audit of Outsourcing

• The objective of an audit of outsourcing is to determine whether:

– Risks associated with outsourcing are mitigated

– Objectives of outsourcing are being met

– IT strategy has been modified to make best use of outsourcing

Risks of Outsourcing: Business Risks:

• Outsourcing undesirable functions versus the ones that will provide the greatest competitive

advantage

• Costs of outsourcing

• Not having defined goals and objectives carried over to the service provider

• Contract improperly prepared or structured

• Flexibility limitations in the future

• Going concern

SAS 70

• If third-party services directly impact financial reporting or internal control environment

activities, a company’s management is now responsible for evaluating the design and effectiveness of the control structure

Offshoring:

• Political, socio-economic, or other factors may amplify outsourcing risks

• Weak controls may affect customer privacy

• Privacy regulations may not be as strict in some areas

• Different laws and regulations

• Language barriers

Security Risks:

• Network security issues

• Customer data theft or misuse

• Cyber crime

• Inability to closely monitor security claims

Auditing and Outsourcing It is important for the auditor to be a part of the process if a client decides to outsource -Determining what should be outsourced and reasons for outsourcing -Various alternatives with respect to outsourcing -Key components of the contract -Performance expectations

ISACA Audit Guidelines for Outsourcing (G4) Audit Charter

• Any outsourced services must be included in the scope of the audit charter

• The audit charter should explicitly include the auditor’s right to:

-Review the agreement between the service user and the service provider -Carry out necessary audit work regarding the outsourced function -Report findings, conclusions and recommendations to service user management

Planning

• Obtain an understanding of the nature, timing and extent of the outsourced services

• Identify and assess risks associated with the outsourced services

• Obtain an understanding of which controls are the responsibility of the service provider and

which controls will remain the responsibility of the service user.

Performance of Audit Work

• Audit work should be performed as if the service was being provided in the service user’s own

IS environment.

• Auditor must consider contractual agreements and legal requirements

• Auditor should review management of outsourced services

• Auditor should consider restrictions on scope and report them to management

Reporting

• After completing the audit work, the auditor should provide an audit report to the service user