Forrester is a proponent of what we call strategic rightsourcing, the strategy of carving out commodity functions that offer little business advantage and hiring third parties to perform those functions. Performing such work yourself is economically unviable. This differs from traditional outsourcing because it is more targeted, standardized, and governed by policies and provisioning that are more flexible to change and more tightly integrated into the internal strategic functions.
IT management can fit the targeted definition for commodity candidates for outsourcing in this model -- some functions are indeed commodities, such as basic infrastructure monitoring -- however many are more strategic and should remain in-house, such as automation orchestration and service portfolio management.
Furthermore, the interfaces that bind the many functions together (human or software) must be strong to enable management outsourcing. Unfortunately, most enterprises have interfaces that are fragile, if they exist at all. Overall process discipline and the integrated orchestration of IT services must improve regardless of any sourcing decisions.
Functional flaws will be amplified as the world becomes more dynamic and as IT embarks upon the strong mandate to become more entwined with business execution. Fixing these flaws internally is difficult. Handling such handoffs with third parties is more complex. If you can't do it internally, you will never do it well with third parties.
IT management can fit the targeted definition for commodity candidates for outsourcing in this model, but be careful in how it is approached and executed. Some management functions are indeed commodities (for example basic infrastructure monitoring and sometimes the service desk), however, many are more strategic and should remain in-house (for example overall automation orchestration and service portfolio management).
Furthermore, the interfaces that bind the many functions together (human or software) must be strong to enable management outsourcing. Unfortunately, most enterprises have interfaces that are fragile if they exist at all. Overall process discipline and the integrated orchestration of IT services must improve regardless of any sourcing decisions. Functional flaws will be amplified as the world becomes more dynamic and as IT embarks upon the strong mandate to become more entwined with business execution. Fixing these flaws internally is difficult. Handling such handoffs with third parties is more complex. If you can't do it internally, you will never do it well with third parties.
Weaknesses in negotiating terms and conditions as well as service-level agreements will kill any outsourcing relationship. Indeed, this is the primary reason outsourcing has earned such a poor reputation. The problem is not with the outsourcers as much as with customers who lack the planning and execution such situations demand. Ambiguity favors the vendor, not the customer. Be crystal clear about everything and plan for worst case scenarios.
Automation is more attractive than outsourcing. If a commodity function can be automated, following that path is usually less painful than outsourcing it. You can retain control, execute with confidence, and realize significant labor savings.
Unless your enterprise is very small, do not contract anyone to perform monitoring and data collection (for example CMDB) in a fully remote model (such as all polling and data collection originating from the outside). Such architectures will require privileged access to many of your resources. In itself, this is an issue that can be easily addressed. (When performed over a secured VPN your risk of unauthorized access and use is low, but if you go this route, be firm in the contract about data privacy.) The bigger problem is the sheer flood of data over this connection.
A hybrid model is better, with some type of instrumentation installed on your premises to do the work of polling, collection, and hopefully some processing. The best way to implement this is via a self-contained appliance. The remote party can control this appliance and manage reporting remotely. It is far more efficient than a full remote model.
We've seen occasions where the collected data is actually not owned by the customer. In these situations, customers are forced to buy back their own data upon termination of the contract. Protect against this. Mandate your rights to your data from the very beginning. Also, as Forrester has identified with our cloud computing data protection heat map, governmental regulations may render geographic presence of your data illegal. Understand where your data will reside and check your own country's data privacy requirements.
If your only goal for outsourcing is to save money, you will be disappointed. Almost all who pursue this myopic approach spend more in the end. In fact, many eventually learn they are spending more than they did before they entered into the contract. Out-of-scope work adds up and vendor management costs are usually underestimated. Address the overhead of any outsourcing arrangement up front. You need ongoing relationship management and additional effort to ensure good communications and technology integration.
Outsourcing IT management can be beneficial, but it isn't the cure-all that many suppliers profess and, if you get it wrong, the results can be devastating. Proper planning and preparation will mean the difference between success and failure. That's a simple and obvious concept, but one that is so often overlooked. Be strategic about outsourcing, not tactical.
Glenn O’Donnell is a senior analyst at Forrester Research, where he serves Infrastructure & Operations Professionals. He will be speaking at Forrester’s IT Forum, May 26-28, 2010 in Las Vegas.


