Shah Sheikh mentioned “Enterprises in the UAE tend to outsource back-office operations such as HR, Payroll and Accounting, Desktop and Server support. Such outsourcing strategic decisions are easy to make at the boardroom but outsourcing information security is completely a different talking point. We often find the organizations that tend to outsource information security services lack the legal and contractual controls and framework to ensure their businesses continue without being impacted by a cyber attack or breach. We have seen in the industry over the last few years that majority of organizations that do experience a major security breach results in direct consequences at the boardroom level however the 3rd party information security provider delivering security services get away scot-free. The point here is you can outsource information security but you cannot outsource your enterprise risk. There just isn’t enough provision around insurance and risk transference in legal terms and this needs to be looked at for the outsourcing business model to be successful”.
Shah Sheikh mentioned “Enterprises in the UAE tend to outsource back-office operations such as HR, Payroll and Accounting, Desktop and Server support. Such outsourcing strategic decisions are easy to make at the boardroom but outsourcing information security is completely a different talking point. We often find the organizations that tend to outsource information security services lack the legal and contractual controls and framework to ensure their businesses continue without being impacted by a cyber attack or breach. We have seen in the industry over the last few years that majority of organizations that do experience a major security breach results in direct consequences at the boardroom level however the 3rd party information security provider delivering security services get away scot-free. The point here is you can outsource information security but you cannot outsource your enterprise risk. There just isn’t enough provision around insurance and risk transference in legal terms and this needs to be looked at for the outsourcing business model to be successful”.