Trade Secret Theft
Secured facilities and rigorous employee screening can cut the risk.
Computerworld - Taking work offshore may cut costs, but it still comes with a not-so-hidden price. Asian countries, including the No. 1 outsourcing destination, India, have weak or untested intellectual property laws, inefficient courts, and financial and public records mechanisms that make it difficult to conduct employee background checks.
That doesn't mean that intellectual property sent to reputable offshore developers is more likely to be stolen and sold than it is here. Sophisticated U.S. and Canadian companies have lost valuable intellectual property in their home countries because of dishonest employees and hackers. Employees in India and elsewhere aren't any more dishonest than workers here. But because overseas court systems and laws aren't as strong as in those the U.S. and evaluating potential employees is more difficult overseas, the odds of intellectual property theft could be higher.
U.S. businesses are also sending valuable code to regions of the world with high piracy rates. In China, for instance, 92% of the software installed on computers is pirated, according to a recent study by IDC and the Business Software Alliance. (But China is trying to overcome the piracy stigma; see QuickLink 49092.) In India, the piracy rate is 73%, and in the U.S., it's 22%, the lowest rate in the global study.
Physical Lockdown
Imagining the ways a company can lose intellectual property is similar to playing a war game. The possibilities for physical and network-based thefts are endless. Even in protected environments, employees can memorize credit card data and sell it. Product development work can reveal a company's plan for new services. Back doors can be built into programs.
This issue has given rise to a practice by outsourcing firms, particularly in India, to create walled compounds that resemble government intelligence agencies . The compounds have guards and gates, multiple levels of security checks and locked-down information systems without any ports or drives.
U.S. companies couple those physical protections with development methodologies that make sure no one person sees all the code. "The code, in the aggregate, is not at risk," says Nate Lentz, president and CEO of Verticalnet Software Inc., a maker of sourcing and supply chain software in Malvern, Pa.
But Lentz says he also wants to minimize the risk that his outsourcer's employees will leave the company. High turnover can hurt productivity and add risks as well. Lentz treats the outsourcers' employees as "dual employees," by including them in companywide e-mail distributions and town hall meetings. "It's our belief that that kind of structure makes them feel much more a part



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn...
- Virtualize Business-Critical Applications with Confidence
- Virtualizing business-critical applications has become a key focus for organizations as they move along their virtualization journey. With the launch of VMware vSphere®...