Organisations increasingly outsource tasks and processes to external service providers. Cost savings, focus on core activities and access to specialised expertise are common drivers. At the same time, real-world incidents show that third parties are a growing attack vector in cyber incidents.
In the e-learning Secure Outsourcing of Services, employees learn that outsourcing is not just a business decision, but also a security and privacy responsibility. Once systems, processes or data are shared with third parties, organisations become dependent on their security posture.
The course explores both the benefits and risks of outsourcing. These include loss of direct control, dependency on suppliers, communication challenges due to cultural or language differences and risks related to confidentiality and data protection. Data breaches, reputational damage and legal consequences are realistic outcomes when security is overlooked.
Two story-driven videos bring these risks to life.
In the business scenario, participants follow Julian, CEO of a technology company. Focused on cost savings, he outsources data management without sufficient attention to security controls or contractual safeguards. Months later, a major data breach leads to customer outrage and reputational damage.
In the private scenario, Julian outsources household cleaning but takes time to verify references and set clear expectations. The contrast highlights the importance of careful decision-making — both professionally and personally.
The course addresses key outsourcing risks, including:
- lack of transparency in supplier security practices
- unclear contracts and liability arrangements
- regulatory and compliance challenges across jurisdictions
- outdated software and weak controls at third parties
- dependency on external systems and processes
Practical mitigation measures are covered in detail. Participants learn the importance of due diligence, clear contracts with security and privacy clauses, regular audits and active supplier management. Incident response is also addressed: how to prepare for and respond effectively to security incidents involving third parties.
The e-learning concludes with practical guidance that employees can apply immediately. By staying critical, asking the right questions and embedding security into outsourcing decisions, organisations can benefit from outsourcing while keeping risks under control.
What will participants learn?
After completing this course, participants will:
- understand what outsourcing is and why it introduces risk
- recognise security and privacy risks related to third parties
- know why due diligence and supplier selection matter
- understand the importance of clear contracts and responsibilities
- know how to respond to incidents involving suppliers
- contribute actively to secure collaboration with external partners
Who is this course for?
This course is suitable for:
- employees working with external service providers
- managers, project leaders and procurement staff
- organisations managing supply chain and vendor risks
- employees without legal or technical expertise
Why this course is relevant right now
Supply chain attacks are increasing. Training employees to recognise and manage outsourcing risks significantly reduces the likelihood of data breaches, operational disruption and reputational harm.