#PMP #PPM #project #Agile #cybersecurity #bitcoin #ai #SAFe #zerotrust #virtual #mindmap #remote #COVID19 #scaledagile #creative
  • Welcome
  • Contact
  • Resume
  • Expertise
  • Blog
  • Books / White Papers
  • Software / Service Reviews
  • Mentoring Contact Form
  • This Week in PM
  • PM Video Series
  • Awards/Recognition
  • Templates & Downloads
  • Clients
  • Professional Services
  • Past Survey Results

Key Considerations for Healthcare Offshore Development

10/21/2021

0 Comments

 
No one will argue with the savings associated with utilizing offshore development for your various IT projects. It may not make sense all the time, every time, and for some organizations…any time, but when used properly at the right time and for the right projects it can drastically increase the profitability of your engagement. Rates are relatively low and if you find the right, dependable team and have the right focused leadership on this side of whatever pond we’re talking about, then it is possible to stay the course and complete projects and healthcare development initiatives on time, very profitable, and with a high quality of development and functionality.


When considering data integrity, risks and issues that must be addressed surrounding healthcare IT and data handling, the first thing everyone thinks of is HIPAA. While that will always be at the top of everyone’s list, there’s more to think about. Mobile adoption is a key consideration as well in these times – it is an inevitable direction as most healthcare providers are utilizing mobile devices in exam rooms, emergency rooms, ambulances, and for connection away from their offices. Many healthcare analysts believe the greatest barrier to mobile health adoption is the risk of a data breach, followed by meeting regulatory and compliance requirements for the privacy and security of patient data. While there are certainly concerns to be addressed, the necessity of mobile devices for delivering care in an ever-expanding healthcare eco-system is undeniable.


Pros and cons


Why am I mentioning all of this? Because when considering offshore development, these concerns don’t go away. They do, in fact, grow if for no other reason than for pure ignorance as the level of security to be maintained is still the same and the onus for data safety lies with the delivery organization, not the offshore development team. Still there are several areas you must think about when considering taking your development offshore:


  • Any existence of a strong labor union presence in software service sector force may result in lower productivity
  • Some areas have a scarcity of trained supply for resources (a concern because some areas have resource attrition rates as high as 25%)
  • Lack of wide array of technology skill set
  • Potential for a lower oral English language skillset
  • Unstable governments and inadequate IP laws
  • Time zone differences often in the 8-12 hour range
  • Weak software development process framework
  • Some areas have resource attrition rates as high as 25%


Of course, there are benefits. Hourly rates in the range of $10-$30 per hour for most teams will top the list. And language barriers can often be overcome through the use of translators or by limiting most communication to email and instant messenger. In reality, most of these companies, when managed effectively by strong leaders on the hiring organization side, can delivery excellent services.


Risk considerations


As with any undertaking like this, there are always going to be risks and security concerns. Whether engaged in global software outsourcing or not, each company must assess the threats to their computer systems and the actual risks that they face. Threats include viruses, denial of service attacks, network intrusions, fraud, and sabotage by disgruntled employees. It is, of course, impossible to defend against all possible threats and therefore each company must analyze its actual risks. The investment in computer and network security must be commensurate with the actual risks.


Risk analysis and determining appropriate counter measures is necessary for all companies. However, the picture becomes much more complicated for a company that is using an offshore development facility. There are several complicating factors (as outlined by a document on Security Challenges of Offshore Development from the SANS Institute Reading Room):


  • Loss of overall control. Outsourcing development often means a loss of some control and oversight. Security often loses the ability to regulate authentication users from the offshore team and opens direct channels into their system. It’s a risk/potential security concern that needs to be weighed.
  • Network complexities. Keeping a handle on traffic and managing network configurations becomes an even greater challenge when an offshore development center is added. If the development center produces software for multiple clients and does not isolate the networks connected to each client’s system, configuration management can become a nearly impossible task.
  • Clashing security policies. Not to be overlooked or minimized is the likely difference between yours and the offshore development facility’s approaches to security and security policies. Discrepancies and can create holes in the security system.
  • Threats to intellectual property. Export compliance issues can become an issue when working with an offshore development center because your company’s information, customer data, financial data and trade secrets become available to employees who are not subject to the same US laws you are. Costly litigation can follow if there are security breaches.
  • Legal concerns. Offshore development centers are subject to different laws – meaning protection of your sensitive data may be non-existent. Do proper research before embarking.


Summary


In the end, you have to decide what is going to be best for your organization, obviously. There are definitely some downside risks and considerations with going offshore – unless you have someone onsite 100% managing the offshore development team. But by doing that you cut seriously into the cost savings you’ll realize by going offshore, so I don’t recommend going that route. Plus, you’d have to find someone from your US group that wants to relocate to Vietnam. Not for me, but it may be for someone. A past colleague of mine has his own technical development staff there so he keeps a house there and goes there often.


What about our readers? If your organization is utilizing a few or an entire staff of offshore developers, how is it going? Successful? Problematic? What ongoing or frequent issues are you seeing? How are they being addressed? Please share your thoughts and experiences.
0 Comments



Leave a Reply.

    Author:

    Picture

    Brad Egeland


    Named the "#1 Provider of Project Management Content in the World," Brad Egeland has over 25 years of professional IT experience as a developer, manager, project manager, consultant and author.  He has written more than 8,000 expert online articles, eBooks, white papers and video articles for clients worldwide.  If you want Brad to write for your site, contact him. Want your content on this blog and promoted? Contact him. Looking for advice/menoring? Contact him.

    Picture
    Picture
    Picture
    Picture

    RSS Feed

    Archives

    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    June 2020
    May 2020
    April 2020
    March 2020
    February 2020
    January 2020
    December 2019
    November 2019
    October 2019
    September 2019
    August 2019
    July 2019
    June 2019
    May 2019
    April 2019
    March 2019
    February 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    August 2017
    July 2017
    June 2017
    May 2017
    April 2017
    March 2017
    February 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015
    February 2015
    January 2015
    December 2014
    November 2014
    October 2014
    September 2014
    August 2014
    July 2014
    June 2014
    May 2014
    April 2014
    March 2014
    February 2014
    January 2014
    December 2013
    November 2013
    October 2013
    September 2013
    August 2013
    July 2013
    June 2013
    May 2013
    April 2013
    March 2013
    February 2013
    January 2013
    December 2012
    November 2012
    October 2012
    September 2012
    August 2012
    July 2012
    June 2012
    May 2012
    April 2012
    March 2012
    February 2012
    January 2012
    December 2011
    November 2011
    October 2011
    September 2011
    August 2011
    July 2011
    June 2011
    May 2011
    March 2011
    January 2011
    December 2010
    November 2010
    October 2010
    September 2010
    August 2010
    June 2010
    May 2010
    April 2010
    March 2010
    November 2009

    RSS Feed

Powered by Create your own unique website with customizable templates.