Although the number of organisations pursuing strategic outsourcing initiatives continues to rise, numerous studies reveal that more than half of these investments fail to return the benefits executives expect; derailing an organisation, losing significant time and money in sunk investment, and in some cases harming the relationships with customers.
There are a broad range of contractual, operational, political and cultural risks that can quickly derail an outsourcing initiative. Many executives struggle to manage this uncertainty.
While there are different explanations for sourcing failures, each can be traced back to a fundamental lapse in managerial understanding, oversight and control; in affect to a failure in governance.
There are serious practical obstacles in trying to apply outsourcing governance, efficiently and continuously on a day to day basis. The first problem organisations encounter is difficulty in indentifying and analysing risks, the first step towards managing them.
Common risks: that cause failed outsourcing initiatives
• Organisations take for granted certain risks - which can focus resources on lower priority risks and ignore more critical or impacting risks.
• Certain risks exist naturally as a result of outsourcing - many organisations assume sourcing to be the same as procurement and too little attention is paid to the understanding of the wider risks.
• Risk is everywhere – but very few organisations attempt to establish a coherent view of risk.
• Risk is personal – consequences of risk are visited on all stakeholders, yet most organisations task a handful of personnel to make sourcing decisions.
• Risk cannot be delegated – regardless of whom risk is delegated to, and who may assume it, the originator is still responsible; senior management typically do not have an organisation-wide deep understanding of all dimensions of risks, and as such, cannot manage risk on their own.
• Risk is probabilistic – there are always a set of circumstances that can bring about the outcome least desired – yet very few organisations attempt to mitigate for these.
• Risk has both positive and negative outcomes – too many organisations focus on the negative aspects of risks. An understanding of the positive aspects of risks can bring about substantial additional value.
Risk management has unfortunately developed as a separate function within many large organisations, and is only today being recognised as a fundamental tenant of good governance. All too often, risk has been narrowly confined to financial and market risk. However a broader category of risk needs to be assessed and adequately managed. These broader risks include decision risk and operational risks.
The traditional approach to risk has been to view it as a negative outcome - nevertheless it is also worth stating that risk can have positive impact and an organisation must balance risk with reward. Innovation and new ideas come with risk. Without risk there would be little innovation. In this sense it is important for the leadership to provide the boundary conditions, direction and guidance that helps set the tone for appropriate risk taking.
Risk assessment and management must also be seen to be a distributed, shared activity that everyone is engaged in. It cannot be simply at the realm of a risk department, for they will have little experience of day to day operational risks. For risk assessment and management to be an enterprise activity, there needs to be a guiding hand from the senior management that provides the appetite it has for risk taking and the treatment expected of certain types of risks. Without this, anarchy will reign. The leadership must instil processes and systems for risk assessment, measurement and treatment across the enterprise.
Risk management must be one of the elements of good governance and in this sense it must be integrated with the other aspects of governance, and cannot be treated in a silo.