Offshore Service
Achieving savings in an increasingly
cost-conscious and global business environment is essential for a
business to succeed. One way of achieving savings is for suppliers
and service providers to offshore significant elements of their
service provision. This option can have serious implications for
Information Assurance, potentially introducing new risks and
incurring additional costs in managing or mitigating these risks.
Under UK Law, personal data cannot be transferred to a country
outside the European Economic Area (EEA) unless that country
ensures an adequate level of protection for the rights and freedoms
of data subjects in relation to the processing of personal
data.
VEGA's approach to offshoring
VEGA consultants use their extensive
experience to assess our clients’ offshoring requirements,
providing guidance and advice on the risks and impacts associated
with offshoring data or services. For Government customers, our
consultants can support applications for formal approval by the
Information Assurance Delivery Group (IADG) at the Cabinet Office –
a mandated requirement in CESG Good Practice Guide 6. This enables
us to support our clients in developing a cost benefit analysis
that can be approved by the Senior Information Risk Owner (SIRO) to
demonstrate value-for-money and/or efficiency gains for any
offshored project.
By using VEGA, our clients can be assured that
they will receive the independent CESG Listed Advisor Scheme (CLAS)
help required in making the appropriate risk assessments and risk
management decisions when choosing between offshore, near-shore or
at home data storage and services. Whether you are seeking to
comply with the DPA or wider Government policy requirements, VEGA
can assist you in preparing the risk management plan to support
your business case.
Contact VEGA for more information about
offshoring