[et_pb_section admin_label=”section”]
\n\t\t\t[et_pb_row admin_label=”row”]
\n\t\t\t\t[et_pb_column type=”4_4″][et_pb_text admin_label=”Text”]Every time we talk to someone outsourcing\/contractor needs, especially when it comes to tech projects, the issue of security is foremost in their mind.\u00a0 Managing a distributed workforce that works from multiple different locations, especially when it includes international contractors, can be a security nightmare if it isn\u2019t handled well \u2013 and people are right to be concerned. With the right precautions, however, the security risks of a contractor-based workforce can be largely mitigated \u2013 and you can develop your project without having to worry about the theft of your intellectual property or the compromise of your sensitive systems.<\/p>\n
The first concept that you should be familiar with is compartmentalization.\u00a0 Basically, contractors that are working on your projects should only every have access to project files that are directly related to their jobs \u2013 and individual projects should operate autonomously of the rest of your corporate network and systems.\u00a0 If one contractors is a \u201cbad apple\u201d and tries to steal information and records, they should not have access to anything sensitive that is held by other departments in your company.\u00a0 For example, a graphic design contractor shouldn\u2019t be given access to the same server where your company\u2019s financial information and client records is stored.<\/p>\n
Compartmentalization can be both physical and administrative.\u00a0 To begin with, don\u2019t give access to your corporate network to anyone that doesn\u2019t absolutely require it.\u00a0 Many companies (including retail giants like CostCo) use \u201cair gapped\u201d networks specifically for contractors and third parties \u2013 basically putting them on their own 4G powered network so they can\u2019t compromise internal corporate security but can still have full connectivity and can get their work done. Administrative compartmentalization is done through the permissions that you can alter in collaborative software and project management systems.\u00a0 You want to give your contractors access to everything that they need to do their jobs \u2013 but you can also restrict that access to read-only if necessary for certain documents, and can track their changes to other files to ensure that everything is above board.<\/p>\n
For some companies, the value of the company lies in closely held intellectual property and business plans that could be \u201cstolen\u201d and replicated elsewhere if security is compromised.\u00a0 For example, say you have an innovative idea for an app and want to have a freelancer design the app for you\u2026 how can you prevent that freelancer from simply taking your idea and selling it themselves?<\/p>\n
You can protect yourself with legal barriers and by dividing the project up.\u00a0 Legally, you should always have non-disclosure agreements signed by your freelancers \u2013 and the terms of your contract should spell out your ownership of the deliverables and the terms by which they must delete your intellectual property upon project completion. Be aware though, that these contracts might be hard to enforce when broken by international contractors because of the relatively high costs of legal action against international companies and individuals. In these cases, your best protection is to divide the project so no single contractor has the complete picture of the app\/project that you are building \u2013 a tactic that is commonly used by hardware companies that want to protect their designs before assembling the product in their own domestic location.<\/p>\n
Last, but not least, the best protection against a security breach is to only hire trustworthy contractors and firms to begin with. Most freelancer websites have a heavy focus on reputation and reviews so companies know that they are getting a highly recommended freelancer \u2013 and you should be wary of hiring someone without the record of completed projects that suggest their former employers are happy with them.\u00a0 If you hire a contractor locally, or find one through another website that doesn\u2019t keep reputation records, ask to contact past employers and to see their portfolio.\u00a0 A contractor that hesitates to provide contact information for their past employers may be hiding a bad experience, or they may be trying to take credit for a project that they weren\u2019t instrumental in completing.\u00a0 The vast majority of contractors and freelancers are reputable people that will genuinely do their best for your company \u2013 but you should always trust your gut feeling and interview everyone that you consider bringing into a project.[\/et_pb_text][\/et_pb_column]
\n\t\t\t[\/et_pb_row]
\n\t\t[\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Every time we talk to someone outsourcing\/contractor needs, especially when it comes to tech projects, the issue of security is foremost in their mind.\u00a0 Managing a distributed workforce that works from multiple different locations, especially when it includes international contractors, can be a security nightmare if it isn\u2019t handled well \u2013 and people are right […]<\/p>\n","protected":false},"author":1037,"featured_media":29610,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"Every time we talk to someone outsourcing\/contractor needs, especially when it comes to tech projects, the issue of security is foremost in their mind.\u00a0 Managing a distributed workforce that works from multiple different locations, especially when it includes international contractors, can be a security nightmare if it isn\u2019t handled well \u2013 and people are right to be concerned. With the right precautions, however, the security risks of a contractor-based workforce can be largely mitigated \u2013 and you can develop your project without having to worry about the theft of your intellectual property or the compromise of your sensitive systems.\r\n