Worldwide: An Overview Of The ISO Guidance On Outsourcing

Last Updated: 5 May 2015
Article by Pearse Ryan


On 31 October 2014, the International Organization for Standardization ("ISO") published the first international standard for outsourcing, ISO: 375000: Guidance on Outsourcing (the "Standard").1 The Standard seeks to provide a comprehensive guide to the outsourcing process, regardless of the size of the transaction, the industry sector or the activities to be outsourced. The Standard provides guidance on the phases of an outsourcing project, the processes that organisations need to implement and the governance that is required for an outsourcing transaction to be successful.

The Standard is the final product of a process instigated by a request from the national standards authorities of the Netherlands and Switzerland in 2010. In 2011, an ISO Technical Committee was formed and received input from the standards bodies of 13 countries.2 The Technical Committee also received input from buyers, service providers, outsourcing advisors and academics over the four years of the Standard's development. A draft standard was published in 2013 and a final version was agreed in October 2014.

ISO standards are not legally binding but are important statements of industry specific best practice, which suppliers and customers alike are likely to make reference to, both in their general business conduct and in their contractual arrangements with customers and suppliers.


The Standard covers the main phases, processes and governance aspects of outsourcing as a proposed potential 'one size fits all' reference model across all industry sectors. In addition, the processes are intended to be tailored to fit the specific outsourcing strategy and maturity of the particular customer and provider. The Standard starts with the precondition that a customer organisation has already established a sourcing strategy and concluded that there is a beneficial business case for outsourcing. The decision to continue or terminate outsourcing as a strategy option is outside the scope of the Standard and is based on the continuing validity of the particular business case at hand.

The Standard aims to provide a common vocabulary for stakeholders with which to interact and plan the outsourcing process and represents a useful toolkit for the governance of outsourcing throughout its life cycle.

Intended for transnational and horizontal application across industry, the Standard is principles-based and therefore does not enumerate specific legal or regulatory compliance issues that may arise during the outsourcing process. It nevertheless provides an effective business planning framework that should help stakeholders and their advisors to anticipate the compliance issues likely to arise on a case-by-case basis.


The Standard is structured around the four phases of the "outsourcing life cycle" with an emphasis on effective governance practices throughout. These four phases are:

  • outsourcing strategy analysis,
  • initiation and selection,
  • transition, and
  • value delivery.

The Standard focuses primarily on general principles of governance and supplements them with arrangements intended to facilitate the identification of risk at each phase, while preserving the flexibility required for outsourcing material arrangements. The main steps of each process of the Standard focus on the building and maintenance of relationships between the customer and the provider through, for example, the establishment of a joint mission statement and elaborating an outsourcing roadmap with key milestones and success criteria. Each phase contains processes to address its purpose, the main activities to be performed, key success factors and the main inputs and outputs.

The Standard includes a number of useful checklists of issues to illustrate the topics the customer and provider should consider in dealing with specific processes or steps. We discuss the four phases of the outsourcing life cycle below.


The first phase of the outsourcing life cycle is outsourcing strategy analysis. According to the Standard, the purpose of this phase is to "initiate and evaluate outsourcing opportunities and establish and maintain an outsourcing strategy that meets business goals and requirements." This phase is, by nature, predominantly customer-based and aims to enable a customer to assess the value and feasibility of available outsourcing options.

In terms of governance, the Standard suggests that a customer-based governance committee should be established to oversee the entire strategy analysis on the basis of agreed terms of reference and in accordance with a project timetable. Such terms of reference should include consultation with internal and external stakeholders, together with consideration to the integrity of the business case for sourcing and mechanisms for protecting investments made in sourcing options.

Matters to be assessed at this stage include checking whether outsourcing prerequisites are in place, such as up to date business strategies and appropriate approval by senior management. The services eligible for outsourcing are assessed in terms of their scope and strategic importance, underlying service elements (and whether these can feasibly be detached from the organisation) and identifying relevant resources and assets, including personnel, intellectual property, data, hardware, etc. Organisational impact is also considered at this stage, resulting in a detailed impact analysis report addressing benefits, risks, costs, constraints and other impacted factors, with expected best, worst and most likely cases.

An outsourcing strategy is then shaped around the outcomes of these steps, enumerating the chosen goals, model and approach to be taken by the organisation, including the type of relationship it wishes to have with its chosen provider. Selection criteria and high level execution plans can also be prepared at this stage. The crux of the first phase is a decision on whether to proceed with outsourcing by way of the mandated strategy and, where relevant, setting up an outsourcing project.


The purpose of the second phase is to specify the exact requirements for outsourcing, select adequate providers and successfully set up outsourcing agreements. This phase involves drawing up the required services in detail to include the forecasting of future service levels. The outsourcing model to be adopted is also fleshed out in more detail, including governance, performance management, commercial arrangements, transitional issues and business continuity.

Draft outline agreements are also to be produced at this stage, including consultation with legal, tax and other advisors. Potential providers are to be identified based on defined selection criteria and in accordance with any relevant procurement regulations, culminating in a shortlist of providers with whom the outline agreements may be discussed. The final step in the second phase is to negotiate and establish an agreement with one or more preferred providers.

In terms of governance, the Standard suggests that a governing committee internal to the customer should oversee the entire phase, end to end. Internal to the provider, a governance committee should ensure compliance with customer selection processes and incorporating appropriate internal expertise to ensure the value of its proposition is clear. The Standard recommends that, where possible, the customer and provider should collaborate directly during this phase to maximise the effectiveness of later phases for both parties.


The third phase enables the migration of service delivery from the customer or an incumbent provider to the new provider. The Standard recommends that the active participation of the customer in collaborative planning is essential for the success of this phase.

The Standard focuses on governance during this phase in particular. It emphasises the importance of robust management of all projects and programmes during this critical period in order to mitigate against service disruption and to ensure the adequate resourcing of services for the duration of the transfer. The Standard suggests that this phase should be governed by a formal transition management committee jointly staffed by customer and provider and recommends that changes in key resources are kept to a minimum, at least across phases 3 and 4, to ensure that the necessary knowledge and experience is continuously available.

Aside from the governance aspects, the phase comprises refining a delivery framework and executing the transition of knowledge, people and technology as necessary. Risk, audit and compliance functions are allocated and service delivery is tested and finally handed over. The phase comes to an end when delivery capability is confirmed according to agreed specifications, with the official transfer of responsibilities to the provider initiated after key stakeholders have reviewed performance test results and given final sign-off. The Standard recommends that the business case should be updated at this stage and the performance level obtained used as a baseline for evaluation purposes.


The purpose of this final phase is to realise the benefits of the outsourcing arrangement for both parties and to ensure consistent performance and adherence to commitments. This phase is ongoing and ends only when the relationship between the customer and provider is terminated. It consists of service delivery, monitoring and review of service performance, the management of finances and relationships, and the ability to resolve any issues arising. It also incorporates preparation for the continuation or end of an agreement, an aspect of the outsourcing relationship, which the Standard states, is frequently underestimated, imposing risks for both customer and provider.

The Standard states that jointly staffed committees continue to play a key role in providing supervision and control through formal and regular management mechanisms. These facilitate the making of effective service related decisions and development of a trust-based relationship between customer and provider. Depending on the scope of the outsourcing project and relevant compliance requirements, it is expected that a joint committee would feed into the work of specific internal governance committees such as audit, risk and strategy.


The Standard is designed to function as a guide for any organisation either considering its sourcing arrangements for the first time or seeking to improve on previous experience and current practices. This is a lofty goal and, as a 'one size fits all' document for organisations of all sizes, shapes and colours, the Standard generally fulfils its purpose as an adaptable step-by-step guide to best practice. A document with as wide an audience as envisioned by the Standard will naturally have its limitations, speaking no doubt in too much or too little detail for certain organisations. There are a wealth of factors that may be crucial in the outsourcing relationship, such as public procurement issues, which will need to be addressed at the very outset of the "outsourcing lifecycle" and may not be immediately apparent from the Standard itself, given its horizontal application. Advice should be sought at an early stage before significant resources are invested in the outsourcing process. Nevertheless, the Standard certainly provides a roadmap that, if managed from the outset, should help to flag avoidable pitfalls and provide a common language on the basis of which customers and providers can engage, particularly when the international nature of many outsourcing relationships is taken into account.


1 Available for purchase at

2 Bulgaria, Canada, Denmark, Finland, France, Germany, India, Malaysia, Netherlands, Russian Federation, South Korea, Spain and the United Kingdom

This article contains a general summary of developments and is not a complete or definitive statement of the law. Specific legal advice should be obtained where appropriate.

To print this article, all you need is to be registered on

Click to Login as an existing user or Register so you can print this article.

In association with
Related Topics
Related Articles
Up-coming Events Search
Font Size:
Mondaq on Twitter
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of

To Use you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions