Tsakani Dumezulu, Director - Goverment Information Technology Officer (GITO) at Department of Basic Education, delivered a presentation on Outsourcing Public Sector IT - Challenges, Opportunities and Risks at Public Sector Cybersecurity Summit 2023 on the 3rd of October 2023. #PublicSec2023 #Conference #Cybersecurity #PublicSector

1. Outsourcing Public
Sector IT :
Challenges, Opportunities and Risks

2. What is IT
Outsourcing?
 Is a business
practice where
specific tasks or
functions are
contracted to third
parties.

3.  Nearshore Outsourcing - refers to outsourcing to a Technology partner that is locally and close to
your workplace.
 Offshore Outsourcing - refers to working with remote technology partners outside your country.
 Onshore Outsourcing - contracting an external service provider located in your country for on-
site or remote IT services.
 Cloud Computing - Contracting a third-party service provider to provide IT-related services over
the internet, such as Infrastructure-as-a-Service, Platform-as-a-Service,
App- as-a-Service, and Software-as-a-Service.
Types of Outsourcing

4. Why IT
Services
Outsourcing?

6. The
disadvantages
ofOutsourcing
ICTServices

7. Thechallenges
ofOutsourcing
ICTServices

8. TherisksofOutsourcingICTServices
•  Slower turnaround times
•  Lack of control
•  Cultural barriers
•  Lack of internal skills
•  Unplanned costs

9. Janssen, Marijn and Joha,
Anton, "CHALLENGES FOR
ADOPTING CLOUD-BASED
SOFTWAREASASERVICE
(SAAS) IN THE PUBLIC
SECTOR" (2011). ECIS 2011
Proceedings. 80.

10. Sourcing IT products and
services in 2023 challenges:
 Supply Chain issues
 IT skill gap
 Economic headwinds

11. The cost of benchmarking and analysis to determine whether outsourcing is
the right choice
The cost of investigating and selecting a service provider
The cost of transitioning work and knowledge to the outsourcer
Costs of annual fees (inflations )
Costs of ongoing staffing and management of the outsourcing relationship
Outsourcing’s hidden costs

12. Possible Solution / Recommendation

13. Possible Solution / Recommendation
 Ensure you appoint a Chief Information Security Officer
 Risk assessment before outsourcing decision
 Hybrid model – both Parties are responsible and accountable
 Know the relevant Acts, policies, and regulations relating to
public-sector outsourcing
 Define roles and responsibilities
 Assign a dedicated project /account Manager to manage the
service provider
 Agree on communication/reporting plan
 Ensure a Service Level Agreement is in place and monitored