twitter.com/venminder
linkedin.com/company/venminder
Cost Analysis Worksheet: In-house vs. Outsourced Cost
FTE (in-house) cost
Outsourced cost
Due Diligence
item
Financial
Statements
SOC Report
Comments/Skill sets


A public company 10-K can be >100 pages long.
Skill set required – Commercial Credit Analyst
and/or CPA

Measures the effectiveness of your vendors
controls. Were all relevant controls audited? What
controls were passed to you?
Skill set required – CISSP or equivalent in
experience


CyberSecurity


BCP


Vendor Contract 
if the skill set exists in house calculate
(the number of hours required per
vendor) X (all-in hourly FTE cost) X
(opportunity lost cost)
Fill in the blanks as you shop
providers
Is your vendor pen testing their systems? Is your
customer data encrypted at rest? What is their
incident response plan?
Skill set required – CISSP or equivalent in
experience
Does your vendor have an adequate BCP
plan? Has it been tested?
Skill set required – CISSP or equivalent in
experience
How does your contract hold up against the FFIEC
guidance?
Skill set required – Paralegal or equivalent contract
management experience
Digital Comply, Inc. | 400 Ring Road, Suite 131, Elizabethtown, KY 42701 | www.venminder.com
twitter.com/venminder
linkedin.com/company/venminder
Need to outsource some of the heavy lifting? Contact Venminder Now
Digital Comply, Inc. | 400 Ring Road, Suite 131, Elizabethtown, KY 42701 | www.venminder.com