CHAPTER 10

Data Offshoring

Out of Sight, Out of Mind

Offshoring is perhaps the most underappreciated risk in cybersecurity. There isn’t anything inherently wrong with offshoring; on the contrary, the upsides to offshoring are so appealing, the practice is positively ubiquitous. But offshoring jobs or wholesale functions often bring data in tow, which ratchets up the cyber risk considerably.

Outsourcing an entire department—say accounting or human resources—to a vendor with staff located in another country is a common strategy to reduce costs and improve operational efficiencies. Sometimes, companies cannot fill high-demand positions in their home country, so hiring offshore staff is a way to manage the scarcity of talent. Offshoring also makes ...

Get Mobilizing the C-Suite now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.