Security Means More than Certificates

Filed in archive on December 28, 2006

Security in outsourcing should go more beyond than just acquiring the proper certificates required for outsourcing providers.

In India, outsourcing providers have to comply with BS 7799 and companies should also sign service level agreements (SLA) which includes confidential and security clauses. There are also laws which are aimed to minimize the security risks in outsourcing. Examples of such law includes the following:
-IT Act 2000
-Indian Copyright Act
-Indian Penal Code Act
-Indian Contract Act, 1972

Though there are preventive measures such as these, it is not enough in providing security features in outsourcing. Security should go beyond paper which means a tangible evidence which shows that outsourcing providers are protecting the data in outsourced function as well as the means of transporting it.