Secure Outsourcing Advisory
When public bodies outsource functions deemed socially important (critical infrastructure, essential public services) and security-sensitive (handling classified data, critical IT systems), customised procurement processes and stringent security requirements are crucial. This service focuses on providing expert advice on the outsourcing of socially important and security-sensitive activities, primarily for public sector organisations.
Our Digital Trust team specialises in procurement for activities that require the highest level of trust and security, particularly those involving IT systems and technical equipment.
The procurement phase is essential for ensuring that suppliers for these critical activities are reliable from a security perspective. Thorough procurement contributes to secure public transactions and maintaining citizen trust.
Key aspects of secure outsourcing procurement
- Supplier selection: High demands are placed on supplier selection and qualification to vet trustworthiness.
- Security requirements: Setting and enforcing high demands for applicable security and cyber security requirements.
- Regulatory compliance: The process may necessitate consultations with supervisory authorities.
- Confidentiality: In certain cases, all or parts of the procurement documents, such as the requirements specification, may be subject to confidentiality or contain protected classified information.
Experienced consultants combining security and compliance skills
The Digital Trust practice at Zacco brings together some highly skilled professionals experienced in helping make public operations more secure. The team applies the relevant legislation such as national security laws and public procurement rules. Our experts can assist in setting security requirements at the right level, neither overly burdensome nor riskily inadequate. Moreover, they support public actors in introducing robust processes for continuous monitoring, follow-up and adaptation.
With legal and cyber security experts collaborating seamlessly, Zacco’s team is able to tailor the advice to the specific procurement object (e.g., cloud services, maintenance, critical hardware), all relevant legislation and other specific conditions pertaining to the public actor and the service being outsourced. Reach out to discuss how we can help!
