Thursday, December 2, 2010

How to know the data confidentiality at outsourcing centers?

In the financial service industry many companies are skeptical about the security of their data while outsourcing. The uncertainty cannot be belittled since data confidentiality and security is of prime importance particularly for regulated entities in the financial service sector. Hence it becomes mandatory for the buyers of outsourcing services to closely examine the physical and information technology security, as well as data confidentiality processes maintained by the BPO companies.

The basic thing that comply the security and safety is infrastructure. Companies should look for secure and controlled data center environment with fire suppression, emergency power supply, cooling and building security. Also they need to know what all procedures need to be undergone by the personnel to enter the data centers. The place needs to have video surveillance that will be properly monitored. Moreover there should be no rights to privacy policy in place for processing sites and data centers.

Coming to the data security within the process, the companies should make sure that only authorized users have access to the data. Moreover the BPO Company should necessarily be certified and independently audited. The authenticity of the data confidentiality implied by the outsourcing service provider can be checked by knowing the measures used to secure data transfers between all related parties and also the presence of a secure processing environment.

2 comments: