Should I outsource this business function or keep it in-house?

Should I outsource this business function or keep it in-house?

Decision tree operationsoutsourcingmake vs buybusiness strategy

Determine whether a business function should be kept in-house, partially outsourced, or fully delegated to a managed service provider. Use this tree when reviewing the operating model for any significant function — from IT support to finance processing — before committing to a structural change. A disciplined make-vs-buy analysis protects against both the hidden costs of poor outsourcing decisions and the opportunity cost of retaining non-core work internally.

Overview

Type
Decision tree
Tags
operations, outsourcing, make vs buy, business strategy
Entry
Q1
Questions
5
Outcomes
4
Author
Andrew
Last updated
2026-05-12

Decision Tree

Start: Is this function a core competency — one that directly differentiates your organisation or is central to your value proposition?

yes

  • Continues to question: Is there a specific expertise gap — a skill set or depth of capability — that the internal team lacks and cannot feasibly develop in time to meet operational demand?

no

  • Continues to question: Is the fully-loaded cost of performing this function internally (including management overhead, recruitment, training, and tooling) materially higher than comparable market rates for outsourced delivery?

Machine-Readable JSON (Canonical Model)

View JSON
{
  "_meta": {
    "schema": "https://www.drawdecisiontree.com/decision-dag.schema.json",
    "source": "https://www.drawdecisiontree.com",
    "description": "DrawDecisionTree.com is a free tool for building, sharing, and embedding interactive decision trees. This file is the machine-readable export of a published decision tree. The `dsl` field contains the original source in the Decision DAG DSL; the `dag` schema is documented at the URL in `schema` above.",
    "links": {
      "interactive": "https://www.drawdecisiontree.com/t/drawdecisiontree/ops-outsourcing-decision.html",
      "embed": "https://www.drawdecisiontree.com/embed/path/drawdecisiontree/ops-outsourcing-decision",
      "dsl_reference": "https://www.drawdecisiontree.com/decision-tree-dsl-reference.html",
      "guides": "https://www.drawdecisiontree.com/guides",
      "schema_docs": "https://www.drawdecisiontree.com/decision-dag.schema.json",
      "author_trees": "https://www.drawdecisiontree.com/trees/drawdecisiontree"
    },
    "generated_at": "2026-05-29T12:05:39.335Z"
  },
  "author": {
    "handle": "drawdecisiontree",
    "first_name": "Andrew",
    "last_name": null,
    "avatar_url": "1d32d828-b6ca-40ec-bdd7-771fe7b9c36a/avatar-1778531481027.svg",
    "display_name": "Andrew"
  },
  "file": {
    "id": "93244b33-ea92-4ef9-b5be-a01256ba56cb",
    "name": "Should I outsource this business function or keep it in-house?",
    "public_slug": "ops-outsourcing-decision",
    "updated_at": "2026-05-12T16:53:43.587978+00:00",
    "url": "https://www.drawdecisiontree.com/t/drawdecisiontree/ops-outsourcing-decision.html",
    "json_url": "https://www.drawdecisiontree.com/t/drawdecisiontree/ops-outsourcing-decision/tree.json",
    "dsl_url": "https://www.drawdecisiontree.com/t/drawdecisiontree/ops-outsourcing-decision/tree.dag"
  },
  "meta": {
    "description": "Determine whether a business function should be kept in-house, partially outsourced, or fully delegated to a managed service provider. Use this tree when reviewing the operating model for any significant function — from IT support to finance processing — before committing to a structural change. A disciplined make-vs-buy analysis protects against both the hidden costs of poor outsourcing decisions and the opportunity cost of retaining non-core work internally.",
    "mode": "decision",
    "entry": "Q1",
    "tags": [
      "operations",
      "outsourcing",
      "make vs buy",
      "business strategy"
    ],
    "image": "https://images.unsplash.com/photo-1600880292203-757bb62b4baf?w=1200&q=80"
  },
  "questions": [
    {
      "id": "Q1",
      "text": "Is this function a core competency — one that directly differentiates your organisation or is central to your value proposition?"
    },
    {
      "id": "Q2",
      "text": "Is there a specific expertise gap — a skill set or depth of capability — that the internal team lacks and cannot feasibly develop in time to meet operational demand?"
    },
    {
      "id": "Q3",
      "text": "Is the fully-loaded cost of performing this function internally (including management overhead, recruitment, training, and tooling) materially higher than comparable market rates for outsourced delivery?"
    },
    {
      "id": "Q4",
      "text": "Are there specific quality, compliance, or performance standards that require close operational control and oversight — for example, regulatory licences, data protection obligations, or safety-critical delivery standards?"
    },
    {
      "id": "Q5",
      "text": "Is specialist expertise required for this function that your organisation cannot feasibly recruit or retain internally on an ongoing basis?"
    }
  ],
  "outcomes": [
    {
      "id": "KEEP_INHOUSE",
      "label": "Keep In-House"
    },
    {
      "id": "PARTIAL_OUTSOURCE",
      "label": "Partial Outsource — Staff Augmentation"
    },
    {
      "id": "FULL_OUTSOURCE",
      "label": "Full Outsource to Managed Service"
    },
    {
      "id": "OUTSOURCE_MANAGED",
      "label": "Outsource with Retained Oversight"
    }
  ],
  "dsl": "dag: Should I outsource this business function or keep it in-house?\nversion: 1.0.0\nimage: https://images.unsplash.com/photo-1600880292203-757bb62b4baf?w=1200&q=80\ndescription: Determine whether a business function should be kept in-house, partially outsourced, or fully delegated to a managed service provider. Use this tree when reviewing the operating model for any significant function — from IT support to finance processing — before committing to a structural change. A disciplined make-vs-buy analysis protects against both the hidden costs of poor outsourcing decisions and the opportunity cost of retaining non-core work internally.\ntags: operations, outsourcing, make vs buy, business strategy\nentry: Q1\n\nQ1: Is this function a core competency — one that directly differentiates your organisation or is central to your value proposition?\n  hint: Core competencies are capabilities that your organisation does better than competitors and that customers value directly — for example, proprietary product design, specialist clinical expertise, or a unique customer experience model. Supporting functions such as payroll processing, facilities management, IT helpdesk, or routine data entry are rarely core competencies even if they are important to daily operations. Ask yourself: if this function were performed identically by every competitor, would customers or stakeholders notice or care? If the answer is no, it is likely not a core competency. Be honest and rigorous — organisations frequently over-classify functions as core to avoid the discomfort of change.\n  yes -> Q2\n  no  -> Q3\n\nQ2: Is there a specific expertise gap — a skill set or depth of capability — that the internal team lacks and cannot feasibly develop in time to meet operational demand?\n  hint: Even core competency functions sometimes have isolated specialist sub-tasks that are better performed by an expert external resource than stretched internally — for example, a proprietary software product team might use specialist security penetration testers or accessibility auditors. This is fundamentally different from outsourcing the core function itself. Staff augmentation fills a defined gap for a defined period without ceding strategic control or institutional knowledge. If the gap is temporary (a project, a peak season, a skills transition period), staff augmentation is almost always preferable to full outsourcing for a core function.\n  yes -> [PARTIAL_OUTSOURCE]\n  no  -> [KEEP_INHOUSE]\n\nQ3: Is the fully-loaded cost of performing this function internally (including management overhead, recruitment, training, and tooling) materially higher than comparable market rates for outsourced delivery?\n  hint: A genuine cost comparison must include all direct costs (salaries, employer NI, benefits, office space, equipment, software licences) and indirect costs (management time, HR overhead, absence cover, and the cost of errors or rework). Obtain at least two market quotations or benchmark against published industry rate cards before concluding that outsourcing is cheaper — headline quotes often exclude transition costs, retained management overhead, and the cost of contract management. Factor in one-off transition costs such as redundancy, knowledge transfer, and IT integration, which can take 12–18 months to amortise. If the cost comparison is within 15%, the financial case alone is unlikely to be sufficient justification for outsourcing.\n  yes -> Q4\n  no  -> [KEEP_INHOUSE]\n\nQ4: Are there specific quality, compliance, or performance standards that require close operational control and oversight — for example, regulatory licences, data protection obligations, or safety-critical delivery standards?\n  hint: Some functions carry quality obligations that are difficult to monitor and enforce at arm's length — for example, regulated financial advice, clinical care, or safety-critical engineering. If your organisation holds regulatory licences that depend on demonstrating direct control of a function, outsourcing may require regulatory notification or approval, and any outsourcing arrangement must include robust contractual SLAs, audit rights, and escalation procedures. Consider whether the function has had quality failures recently that an external provider would be better or worse placed to prevent. Discuss the implications of outsourcing with your compliance or risk team before answering if the function is subject to regulatory oversight.\n  yes -> Q5\n  no  -> Q5\n\nQ5: Is specialist expertise required for this function that your organisation cannot feasibly recruit or retain internally on an ongoing basis?\n  hint: Specialist expertise gaps arise in highly technical disciplines — such as cyber security, data engineering, actuarial modelling, or niche regulatory compliance — where the talent market is competitive, salaries are high, and maintaining a small internal team creates continuity risk. If the function requires a small number of highly specialised roles that are difficult to backfill, a managed service with retained oversight provides depth and resilience that an internal team cannot. Check whether internal talent could be developed with targeted training before concluding that specialist expertise is permanently unavailable — development is often cheaper than outsourcing over a five-year horizon.\n  yes -> [OUTSOURCE_MANAGED]\n  no  -> [FULL_OUTSOURCE]\n\n[KEEP_INHOUSE]: Keep In-House\n  color: #2E7D32\n  description: Based on the assessment, retaining this function in-house is the right decision — it is either a core competency, carries data sensitivity or quality control requirements that make outsourcing high-risk, or the cost and expertise case for outsourcing is not compelling. Document the rationale for the in-house decision and review it formally at least every two years or when there is a material change in volume, cost, or technology. Focus investment on improving the efficiency and quality of in-house delivery through process standardisation, tooling, and staff development. Establish clear performance metrics for the function so that future make-vs-buy reviews are based on objective data rather than subjective assessment.\n  code: OPS_OUT_INHOUSE\n\n[PARTIAL_OUTSOURCE]: Partial Outsource — Staff Augmentation\n  color: #F9A825\n  description: Where specific expertise is unavailable internally but full outsourcing is not appropriate, staff augmentation through a specialist staffing agency or consultancy allows you to supplement the internal team without ceding operational control. Define the specific skills gap, agree a clear scope and deliverable set with the augmented resource, and ensure all IP and work product is assigned to your organisation under the engagement contract. Integrate augmented staff into your operational processes, systems, and reporting lines as closely as possible to maintain quality and knowledge transfer. Plan from day one for how the knowledge and skills brought by augmented staff will be embedded in the permanent team before the engagement ends to avoid recurring dependency.\n  code: OPS_OUT_PARTIAL\n\n[FULL_OUTSOURCE]: Full Outsource to Managed Service\n  color: #1565C0\n  description: Full outsourcing to a managed service provider (MSP) is appropriate where the function is non-core, cost-effective to outsource, and does not carry prohibitive data or quality control constraints. Issue a competitive tender or RFP using the Vendor Selection tree to select the right provider, and ensure the contract includes detailed SLAs, KPIs, audit rights, data processing agreements, and clear termination and transition-out provisions. Establish a retained contract management function internally — even a small retained team is essential to manage performance, handle escalations, and drive continuous improvement. Conduct a formal post-transition review at the 90-day and 12-month marks to validate that the expected cost savings and quality improvements have been realised.\n  code: OPS_OUT_FULL\n\n[OUTSOURCE_MANAGED]: Outsource with Retained Oversight\n  color: #B71C1C\n  description: Where specialist expertise is the primary driver for outsourcing but quality, compliance, or data sensitivity requires ongoing control, an outsourced model with strong retained oversight is the appropriate structure. Appoint an internal contract manager or vendor relationship owner who has sufficient technical understanding to challenge provider performance and escalate issues effectively. Build contractual provisions for regular performance reviews, on-site audits, incident reporting, and step-in rights if SLAs are persistently breached. Invest in onboarding the provider thoroughly — sharing your quality standards, regulatory obligations, and operational context — so they can act as an informed extension of your team rather than a disconnected third party.\n  code: OPS_OUT_OVERSIGHT\n"
}

DSL Representation

dag: Should I outsource this business function or keep it in-house?
version: 1.0.0
image: https://images.unsplash.com/photo-1600880292203-757bb62b4baf?w=1200&q=80
description: Determine whether a business function should be kept in-house, partially outsourced, or fully delegated to a managed service provider. Use this tree when reviewing the operating model for any significant function — from IT support to finance processing — before committing to a structural change. A disciplined make-vs-buy analysis protects against both the hidden costs of poor outsourcing decisions and the opportunity cost of retaining non-core work internally.
tags: operations, outsourcing, make vs buy, business strategy
entry: Q1

Q1: Is this function a core competency — one that directly differentiates your organisation or is central to your value proposition?
  hint: Core competencies are capabilities that your organisation does better than competitors and that customers value directly — for example, proprietary product design, specialist clinical expertise, or a unique customer experience model. Supporting functions such as payroll processing, facilities management, IT helpdesk, or routine data entry are rarely core competencies even if they are important to daily operations. Ask yourself: if this function were performed identically by every competitor, would customers or stakeholders notice or care? If the answer is no, it is likely not a core competency. Be honest and rigorous — organisations frequently over-classify functions as core to avoid the discomfort of change.
  yes -> Q2
  no  -> Q3

Q2: Is there a specific expertise gap — a skill set or depth of capability — that the internal team lacks and cannot feasibly develop in time to meet operational demand?
  hint: Even core competency functions sometimes have isolated specialist sub-tasks that are better performed by an expert external resource than stretched internally — for example, a proprietary software product team might use specialist security penetration testers or accessibility auditors. This is fundamentally different from outsourcing the core function itself. Staff augmentation fills a defined gap for a defined period without ceding strategic control or institutional knowledge. If the gap is temporary (a project, a peak season, a skills transition period), staff augmentation is almost always preferable to full outsourcing for a core function.
  yes -> [PARTIAL_OUTSOURCE]
  no  -> [KEEP_INHOUSE]

Q3: Is the fully-loaded cost of performing this function internally (including management overhead, recruitment, training, and tooling) materially higher than comparable market rates for outsourced delivery?
  hint: A genuine cost comparison must include all direct costs (salaries, employer NI, benefits, office space, equipment, software licences) and indirect costs (management time, HR overhead, absence cover, and the cost of errors or rework). Obtain at least two market quotations or benchmark against published industry rate cards before concluding that outsourcing is cheaper — headline quotes often exclude transition costs, retained management overhead, and the cost of contract management. Factor in one-off transition costs such as redundancy, knowledge transfer, and IT integration, which can take 12–18 months to amortise. If the cost comparison is within 15%, the financial case alone is unlikely to be sufficient justification for outsourcing.
  yes -> Q4
  no  -> [KEEP_INHOUSE]

Q4: Are there specific quality, compliance, or performance standards that require close operational control and oversight — for example, regulatory licences, data protection obligations, or safety-critical delivery standards?
  hint: Some functions carry quality obligations that are difficult to monitor and enforce at arm's length — for example, regulated financial advice, clinical care, or safety-critical engineering. If your organisation holds regulatory licences that depend on demonstrating direct control of a function, outsourcing may require regulatory notification or approval, and any outsourcing arrangement must include robust contractual SLAs, audit rights, and escalation procedures. Consider whether the function has had quality failures recently that an external provider would be better or worse placed to prevent. Discuss the implications of outsourcing with your compliance or risk team before answering if the function is subject to regulatory oversight.
  yes -> Q5
  no  -> Q5

Q5: Is specialist expertise required for this function that your organisation cannot feasibly recruit or retain internally on an ongoing basis?
  hint: Specialist expertise gaps arise in highly technical disciplines — such as cyber security, data engineering, actuarial modelling, or niche regulatory compliance — where the talent market is competitive, salaries are high, and maintaining a small internal team creates continuity risk. If the function requires a small number of highly specialised roles that are difficult to backfill, a managed service with retained oversight provides depth and resilience that an internal team cannot. Check whether internal talent could be developed with targeted training before concluding that specialist expertise is permanently unavailable — development is often cheaper than outsourcing over a five-year horizon.
  yes -> [OUTSOURCE_MANAGED]
  no  -> [FULL_OUTSOURCE]

[KEEP_INHOUSE]: Keep In-House
  color: #2E7D32
  description: Based on the assessment, retaining this function in-house is the right decision — it is either a core competency, carries data sensitivity or quality control requirements that make outsourcing high-risk, or the cost and expertise case for outsourcing is not compelling. Document the rationale for the in-house decision and review it formally at least every two years or when there is a material change in volume, cost, or technology. Focus investment on improving the efficiency and quality of in-house delivery through process standardisation, tooling, and staff development. Establish clear performance metrics for the function so that future make-vs-buy reviews are based on objective data rather than subjective assessment.
  code: OPS_OUT_INHOUSE

[PARTIAL_OUTSOURCE]: Partial Outsource — Staff Augmentation
  color: #F9A825
  description: Where specific expertise is unavailable internally but full outsourcing is not appropriate, staff augmentation through a specialist staffing agency or consultancy allows you to supplement the internal team without ceding operational control. Define the specific skills gap, agree a clear scope and deliverable set with the augmented resource, and ensure all IP and work product is assigned to your organisation under the engagement contract. Integrate augmented staff into your operational processes, systems, and reporting lines as closely as possible to maintain quality and knowledge transfer. Plan from day one for how the knowledge and skills brought by augmented staff will be embedded in the permanent team before the engagement ends to avoid recurring dependency.
  code: OPS_OUT_PARTIAL

[FULL_OUTSOURCE]: Full Outsource to Managed Service
  color: #1565C0
  description: Full outsourcing to a managed service provider (MSP) is appropriate where the function is non-core, cost-effective to outsource, and does not carry prohibitive data or quality control constraints. Issue a competitive tender or RFP using the Vendor Selection tree to select the right provider, and ensure the contract includes detailed SLAs, KPIs, audit rights, data processing agreements, and clear termination and transition-out provisions. Establish a retained contract management function internally — even a small retained team is essential to manage performance, handle escalations, and drive continuous improvement. Conduct a formal post-transition review at the 90-day and 12-month marks to validate that the expected cost savings and quality improvements have been realised.
  code: OPS_OUT_FULL

[OUTSOURCE_MANAGED]: Outsource with Retained Oversight
  color: #B71C1C
  description: Where specialist expertise is the primary driver for outsourcing but quality, compliance, or data sensitivity requires ongoing control, an outsourced model with strong retained oversight is the appropriate structure. Appoint an internal contract manager or vendor relationship owner who has sufficient technical understanding to challenge provider performance and escalate issues effectively. Build contractual provisions for regular performance reviews, on-site audits, incident reporting, and step-in rights if SLAs are persistently breached. Invest in onboarding the provider thoroughly — sharing your quality standards, regulatory obligations, and operational context — so they can act as an informed extension of your team rather than a disconnected third party.
  code: OPS_OUT_OVERSIGHT

Machine Access

Questions in this decision tree

Possible outcomes

How to use this decision tree

Click "Open interactive version" to step through the questions. Your answers narrow the tree until a recommended outcome is reached. You can also embed this tree on your own site.

More decision trees by Andrew

Which API design pattern is right for my project?
Which API design pattern is right for my project?
Determine the right API design style for your integration scenario.
Authentication Method Selection
Authentication Method Selection
Authentication is a security-critical, high-friction decision to reverse — migrating users from one auth method to another requires coordinated password resets or credential migration campaigns. This tree eliminates methods that don't match your user type, enterprise requirements, and security posture, giving you a clear shortlist before you write a line of code.
Caching Strategy Selection
Caching Strategy Selection
Premature or misapplied caching adds complexity — stale data bugs, invalidation logic, and distributed consistency problems — without solving the actual bottleneck. This tree routes you to the caching pattern that matches your data access profile, so you apply the right tool to the right problem rather than defaulting to Redis for everything.
CI/CD Pipeline Tool Selection
CI/CD Pipeline Tool Selection
Choosing a CI/CD platform is a long-term infrastructure commitment — pipelines accumulate config, custom scripts, and team muscle memory that make switching painful. This tree eliminates tools that don't fit your source control host, infrastructure model, or team scale, leaving only the options genuinely viable for your situation.
Which cloud provider should I use — AWS, Azure, or Google Cloud?
Which cloud provider should I use — AWS, Azure, or Google Cloud?
Answer a few questions to identify the most suitable cloud platform for your workload.
Container Orchestration Platform Selection
Container Orchestration Platform Selection
Container orchestration is foundational infrastructure — the platform you choose shapes how you deploy, scale, network, and operate every service you run. This tree eliminates options that don't match your operational maturity, cloud provider commitment, and workload complexity, so you land on the platform that fits your team today without over-engineering for a scale you haven't reached.