Tech & Sourcing @ Morgan Lewis

On September 15, the EU Commission published a proposal for a Cyber Resilience Act (Proposed CRA), which builds on the 2020 EU Cybersecurity Strategy and the 2020 EU Security Union Strategy, with the aim of ensuring the cybersecurity of products with digital elements and the provision of sufficient information to consumers about the cybersecurity of the products they buy and use.

Environmental, social, and governance (ESG) continues to be a focus area for many companies. As technology companies shift ever increasingly toward the cloud, it is important to keep up to date with ESG issues that may arise for their own company, their vendors, and clients.

In outsourcing, technology, and commercial transactions, cost of living adjustment (COLA) mechanisms linked to price indices are coming under increasing scrutiny with current global inflationary pressures.

On July 18, 2022, the UK government published high-level proposals for its approach to regulating uses of artificial intelligence (AI), as part of its National AI Strategy and, more broadly, its UK Digital Strategy. The government is seeking public views on the approach, which is contained in a policy paper; a more detailed White Paper will be published in late 2022.

Increasingly, companies have been looking to shift from non-cloud IT infrastructure to cloud-based solutions, and have allocated higher monetary resources to cloud-based IT infrastructure products such as compute and storage infrastructure. In fact, as reported by the International Data Corporation (IDC), Q1 of 2022 marked the first time that companies are now spending more money on their cloud-based compute and storage infrastructure than they are on their non-cloud-based IT infrastructure.

In June 2022, the UK government published its cross-government UK Digital Strategy for creating a world-leading environment in which to grow digital businesses. The Digital Strategy brings together various initiatives on digitalization and data-driven technologies, including the National AI Strategy. The government states that it is actively seeking to grow expertise in deep technologies of the future, such as artificial intelligence, next generation semiconductors, digital twins, autonomous systems, and quantum computing.

With the COVID-19 pandemic, many industries experienced a major shift in how the personnel of key suppliers worked, with “nonessential” personnel in large part working remotely. When this shift to remote work first happened (rather abruptly for many companies), security was a critical consideration, but one that was handled in many instances outside the supplier contract, with both parties focusing on keeping business operations going with must-have data and security safeguards in place.

As part of our Spotlight series, we spoke with Mike Pierides, the deputy leader of our technology, outsourcing, and commercial transactions team and a co-leader of our digital solutions industry team, on outsourcing in the financial services (FS) sector.

With a solid uptick in requests for assistance with outsourcing, cloud, and as-a-service contracts, 2022 has been busy from the get-go. ISG Index confirmed this trend across the market in its recent Q2 ISG Index Report presentation on July 13, highlighting as one of its three key takeaways that “contracting activity remains strong, with ADM, engineering and industry BPO leading the way.”

The “shift to the cloud” continues, with analysts making bold predictions regarding the increase of cloud adoption by companies across almost every industry. Cloud solutions offer many cost, innovation, and scalability opportunities. What is often forgotten or considered late in the process, however, is the change in the risk, compliance, and contracting paradigm that arises with the reliance on a third-party cloud provider. If given the time and attention, these changes can be managed and the risks controlled with appropriate diligence and contracting structures.