The New IT Outsourcing Landscape: Seven Trends Heating Up and Seven Practices Going Cold as AI, Outcome-Based Contracts, Cloud Operations, Cybersecurity, Talent Strategy, and Geopolitical Risk Rewrite Enterprise Sourcing

1. AI-enabled and automation-led outsourcing

2. Outcome-based pricing and gainsharing

3. Specialist provider ecosystems

4. Managed cloud operations and continuous optimization

5. Cybersecurity, resilience, and third-party risk services

6. Talent ecosystems and skills-based sourcing

7. Regional diversification, nearshoring, and resilience-led location strategy

The seven practices going cold are:

1. Labor arbitrage as the primary value proposition

2. Large one-stop-provider arrangements

3. Cloud migration treated as the end goal

4. Offshore-first delivery without resilience analysis

5. Long, rigid contracts based on static assumptions

6. Management through SLAs alone

7. Outsourcing strategic understanding and internal accountability

The central lesson is:

The future of outsourcing is not about transferring more work. It is about assembling the right combination of providers, platforms, automation, AI, and internal ownership to produce measurable outcomes without creating unacceptable dependency.

1. Why IT Outsourcing Keeps Changing

Outsourcing reflects the broader technology environment. When enterprise technology was relatively stable, outsourcing contracts could be built around predictable services such as:

• Data-center operations
• Desktop support
• Application maintenance
• Network management
• Service desks

The commercial logic was straightforward.

A provider could operate those services more cheaply through:

• Larger scale
• Standardized processes
• Lower-cost locations
• Shared tools
• Specialized delivery centers

That model still exists. However, enterprise technology has become more dynamic.

Companies now rely on:

• Public cloud platforms
• SaaS applications
• APIs
• Containers
• Data platforms
• AI models
• Edge systems
• Remote work
• Global digital supply chains

Business leaders also expect technology to support:

• Revenue growth
• Customer experience
• Innovation
• Faster decision-making
• Organizational resilience

This has changed the provider’s expected role. The provider is no longer judged only by whether systems remain operational.

It may be expected to:

• Modernize applications
• Automate workflows
• optimize cloud economics
• improve security
• provide scarce skills
• support AI adoption
• increase delivery speed
• improve user experience

The 2022 CIO article captured this transition by arguing that outsourcing relationships were becoming more important to digital transformation and competitive advantage, not merely cost reduction. Seven IT Outsourcing Trends Heating Up Hot Trend 1: AI-Enabled and Automation-Led Outsourcing The most important current change is the integration of AI into service delivery.

Providers are using AI to perform or assist with:

• Code generation
• Automated testing
• Ticket classification
• Customer support
• Incident analysis
• Knowledge retrieval
• Infrastructure monitoring
• Security triage
• Documentation
• Reporting

Traditional outsourcing economics were often based on the number of people assigned to an account. If AI reduces the labor required, that model becomes increasingly difficult to justify. A provider may once have needed 100 people to operate a service.

Automation and AI may allow the service to be delivered with:

• 60 people
• Better tools
• AI agents
• Automated workflows

The important question is who receives the value from that improvement.

Possible commercial outcomes include:

• The customer pays less.
• The provider earns higher margins.
• Savings are shared.
• The same budget produces better service.
• The team redirects capacity toward modernization.

KPMG describes this change as a shift from people arbitrage toward technology arbitrage. AI, automation, and platforms increasingly determine provider economics and differentiation. Why it is hot

AI can improve:

• Speed
• Scalability
• Consistency
• Round-the-clock coverage
• Cost efficiency
• Knowledge access

The risk

Providers may advertise “AI-powered delivery” without proving that:

• Quality improved
• Costs declined
• Service outcomes changed
• Human review is adequate
• Customer data is protected

What customers should require

Contracts should disclose:

• Where AI is used
• Which models or agents are involved
• What customer data they access
• How outputs are reviewed
• How savings are allocated
• Who is accountable for errors

Hot Trend 2: Outcome-Based Pricing and Gainsharing

Traditional outsourcing contracts often pay providers for:

• Employees
• Hours
• Tickets
• Servers
• Devices
• Transactions

These units are easy to count. They do not necessarily represent business value. A provider can process more tickets without reducing the problems generating the tickets. A development supplier can bill more hours without improving product adoption.

Outcome-based commercial models attempt to connect provider compensation with results such as:

• Reduced operating cost
• Faster time to market
• Better customer retention
• Lower incident frequency
• Increased revenue
• Improved employee experience
• Reduced cloud waste

The original CIO article identified gainsharing as an emerging trend in which providers invest in client-specific improvements and receive a portion of the value created. KPMG and TSIA both identify stronger movement toward measurable outcomes, customer success, and value-based pricing in managed services. Why it is hot Outcome models can align the provider with the customer’s actual objectives. The risk Outcomes are difficult to define.

For example, customer retention may depend on:

• Product quality
• Pricing
• Marketing
• Economic conditions
• Provider performance

The provider should not be held accountable for factors it cannot control. What works better

Use outcome-based elements where:

• Baselines are reliable
• Provider influence is significant
• Results can be measured
• Incentives cannot easily be manipulated

A hybrid model may combine:

• Base service fee
• Consumption component
• Performance incentives
• Gainsharing

Hot Trend 3: Specialist Provider Ecosystems The era of expecting one global provider to perform every technology function exceptionally well is weakening. Enterprise technology has become too specialized.

An organization may need different expertise for:

• Cloud operations
• Cybersecurity
• Data engineering
• SAP
• ServiceNow
• AI
• Customer experience
• Software development
• Network transformation

The CIO article identified one-stop shopping as a cooling trend and argued that organizations were increasingly selecting specialists and best-of-breed services. That direction remains strong.

The modern sourcing ecosystem may include:

• Hyperscalers
• Global systems integrators
• Specialist consulting firms
• Managed-service providers
• Boutique developers
• Cybersecurity firms
• SaaS platforms
• Startups
• Freelancers
• Academic partners

Why it is hot

Specialists may offer:

• Deeper expertise
• Faster innovation
• More relevant experience
• Better technology alignment

The risk

A large provider ecosystem creates:

• Integration complexity
• Contract overlap
• Conflicting responsibility
• More vendor-management work
• Fragmented data

What customers need

They need a strong service-integration layer capable of coordinating:

• Architecture
• Incidents
• Data
• Security
• Costs
• End-to-end performance

Hot Trend 4: Managed Cloud Operations and Continuous Optimization Cloud migration was once treated as a transformational destination. Move the applications to the cloud, and the transformation would be complete. The 2022 CIO article predicted that large-scale migration would become less important as a strategic growth driver and that the next phase would focus on specific use cases, platforms, and cloud-enabled business capabilities. That prediction has largely held. The more difficult challenge is often what happens after migration.

Companies must continuously manage:

• Cloud cost
• Security
• Performance
• Availability
• Architecture
• Data
• Vendor services
• Compliance

Cloud managed services are therefore shifting from migration projects toward continuous operations and optimization. Why it is hot Many companies struggle to maintain all the required capabilities internally.

Providers can support:

• FinOps
• Cloud security
• Platform operations
• Observability
• Backup
• Reliability
• Modernization

The risk A provider may become rewarded for increasing cloud usage rather than optimizing value. What customers should measure

• Cost per workload
• Cost per transaction
• Forecast accuracy
• Resource utilization
• Reliability
• Security exposure
• Modernization progress

Hot Trend 5: Cybersecurity, Resilience, and Third-Party Risk Services Cybersecurity outsourcing is expanding because threats, regulations, and technology environments are becoming more complex.

Services may include:

• Managed detection and response
• Identity monitoring
• Security operations
• Vulnerability management
• Cloud security
• Incident response
• Threat intelligence
• Compliance support

The CIO article described a cybersecurity paradox: companies recognized the growing risk but resisted paying sufficiently for sophisticated regional or specialized delivery. Cybersecurity pressure has intensified since then. The World Economic Forum reports that geopolitical tensions, supply-chain dependencies, emerging technologies, and more sophisticated cybercrime are increasing the complexity of cyber resilience. Why it is hot Few companies can independently maintain every required security capability around the clock. The risk Outsourcing security introduces another critical dependency.

A security provider may have access to:

• Logs
• Identities
• Networks
• Systems
• Sensitive data

The customer must retain

• Risk appetite
• Security strategy
• Incident authority
• Regulatory accountability
• Provider oversight

Security work may be outsourced. Security accountability cannot be outsourced completely. Hot Trend 6: Talent Ecosystems and Skills-Based Sourcing Customers no longer evaluate only the provider’s company reputation.

They increasingly evaluate:

• Talent quality
• Attrition
• Recruitment capability
• Technical depth
• Training
• Workforce locations
• Skills availability

The CIO article identified provider talent management as a major sourcing concern because provider turnover and supply constraints could affect service continuity and scalability.

Talent remains central because demand is strong in areas such as:

• AI engineering
• Cybersecurity
• Cloud architecture
• Data engineering
• Platform engineering

Modern sourcing strategies increasingly combine:

• Provider employees
• Internal employees
• Contractors
• Freelancers
• Expert networks
• AI tools

Why it is hot The organization can access capabilities without maintaining every skill permanently. The risk The customer may receive a strong sales team and a weaker delivery team. What customers should monitor

• Named critical personnel
• Experience levels
• Turnover
• Recruitment time
• Training
• Substitution rules
• Knowledge retention

Hot Trend 7: Regional Diversification and Resilience-Led Location Strategy Location strategy is becoming less about identifying the cheapest country and more about creating a resilient delivery portfolio. The war in Ukraine demonstrated that delivery-center location can become a geopolitical and operational issue. The original CIO article warned that the conflict could affect confidence in parts of Eastern Europe and encourage greater caution around large-scale initiatives.

Current risks include:

• War
• Political instability
• Data-localization rules
• Sanctions
• Infrastructure outages
• Cyber conflict
• Climate events
• Labor shortages

Why it is hot

Companies are distributing work across:

• Onshore locations
• Nearshore locations
• Offshore hubs
• Remote teams
• Several providers

The risk More locations increase coordination complexity. The better approach

Design location strategy according to:

• Skill availability
• Time-zone compatibility
• Data rules
• Political stability
• Language
• Cost
• Disaster-recovery needs

The best delivery model is often diversified rather than concentrated in the single cheapest location. Seven IT Outsourcing Practices Going Cold Cold Trend 1: Labor Arbitrage as the Primary Value Proposition Moving work to lower-cost labor markets will remain part of outsourcing. It is losing importance as the main strategic argument.

Labor arbitrage produces diminishing returns because:

• Wages rise
• Turnover increases
• Automation reduces labor needs
• Coordination costs grow
• Quality problems offset savings

Customers increasingly want:

• Expertise
• Automation
• resilience
• innovation
• measurable outcomes

A provider whose primary advantage is low-cost labor is vulnerable to both automation and competitors offering more specialized value. Cold Trend 2: Large One-Stop-Provider Arrangements Broad providers can simplify procurement and governance. However, no provider is likely to lead across every rapidly evolving technology domain.

Large bundled arrangements may create:

• Lock-in
• Weak competition
• Slow innovation
• Average-quality specialist services
• Difficult exits

The CIO article identified one-stop shopping as a cooling trend as customers adopted more specialist ecosystems. The replacement is not uncontrolled multi-vendor complexity.

It is a curated provider portfolio with:

• Clear architecture
• Defined service boundaries
• Integration governance
• Shared performance measures

Cold Trend 3: Cloud Migration as the End Goal Migration alone does not produce cloud value.

An application can be moved to the cloud and remain:

• Expensive
• Poorly designed
• Hard to operate
• Insecure
• Difficult to scale

Cloud strategy is shifting toward:

• Modernization
• Managed platforms
• FinOps
• Data services
• AI workloads
• Industry use cases
• Resilience

Cloud migration remains necessary in many cases. It is becoming a means rather than the final strategic objective. Cold Trend 4: Offshore-First Delivery Without Resilience Analysis The CIO article identified offshore-first sourcing as a cooling trend as organizations sought greater localization and better alignment with agile delivery. Offshore delivery will remain important. What is declining is the assumption that every service should automatically be moved to the lowest-cost location.

Some work benefits from:

• Shared time zones
• Customer proximity
• Regulatory familiarity
• Language
• Physical access
• Rapid collaboration

A balanced model may combine:

• Onshore leadership
• Nearshore product teams
• Offshore scale
• Automated operations

Cold Trend 5: Long, Rigid Contracts Based on Static Assumptions Traditional outsourcing agreements often lasted five to ten years. Long terms gave providers confidence to invest and gave customers pricing predictability.

They also created problems when:

• Technology changed
• Business priorities changed
• Volumes changed
• AI altered delivery economics
• Cloud costs shifted

Modern contracts need mechanisms for:

• Pricing adjustment
• Technology change
• Scope evolution
• Benchmarking
• Service modernization
• Partial termination

The goal is not to eliminate long relationships. It is to avoid locking the relationship into outdated assumptions. Cold Trend 6: Management Through SLAs Alone SLAs remain necessary.

They measure:

• Availability
• Response time
• Resolution
• Backup
• Patching

The CIO article identified management by SLA as a cooling practice because customers wanted providers to contribute more than minimum contractual performance.

A provider can meet every SLA while:

• Users remain unhappy
• Costs increase
• Innovation stalls
• Technical debt grows
• Customer experience declines

Modern provider scorecards should include:

• Business outcomes
• User experience
• Cost improvement
• Automation
• Modernization
• Security
• Knowledge transfer

Cold Trend 7: Outsourcing Strategic Understanding The most dangerous outdated practice is transferring both execution and understanding.

This happens when the provider becomes the only party that understands:

• Architecture
• Systems
• Dependencies
• Operations
• Cost structure

The customer then loses the ability to:

• Challenge the provider
• Change direction
• Insource
• Change suppliers
• Manage risk

The future model requires a capable retained organization.

It should own:

• Strategy
• Product direction
• Architecture
• Data governance
• Cybersecurity leadership
• AI governance
• Vendor management

What Has Changed Since the Original 2022 Trend List? The metaverse cooled dramatically The CIO article listed the metaverse as a hot outsourcing area in 2022, reflecting strong enterprise experimentation at the time. Since then, enterprise attention has shifted heavily toward generative AI and agentic systems.

Some technologies once grouped under the metaverse remain relevant, including:

• Digital twins
• Spatial computing
• Immersive training
• Industrial simulation

However, the broad metaverse label no longer holds the same strategic urgency for most sourcing portfolios. Automation became AI-led The 2022 article correctly identified advanced automation as a growing trend.

The difference now is that automation is increasingly:

• Generative
• Conversational
• Adaptive
• Agent-based

This creates new governance and pricing questions. Cloud moved from migration to management The earlier prediction that cloud migration would lose some strategic novelty has proven directionally accurate. Cloud is now foundational infrastructure.

The differentiating challenge is how well it is:

• Governed
• Optimized
• Secured
• Integrated
• Used for innovation

Geopolitical risk became permanent The Ukraine war was treated as an immediate sourcing shock in 2022.

Geopolitical risk is now a continuing planning category affecting:

• Delivery locations
• Data sovereignty
• Supplier concentration
• Cybersecurity
• Regulation

Talent remains a core constraint Provider talent quality, retention, and skills remain central.

The main change is that AI is now both:

• A response to talent shortages
• A new source of talent demand

How to Redesign an Outsourcing Portfolio Step 1: Inventory every provider and dependency

Document:

• Provider
• Service
• Cost
• Contract term
• Location
• Subcontractors
• Data access
• Criticality

Step 2: Classify every capability

Determine whether it is:

• Strategic
• Differentiating
• Standardized
• Temporary
• Operational
• High risk

Step 3: Identify concentration

Ask:

• Which services depend on one provider?
• Which depend on one geography?
• Which depend on one cloud?
• Which are difficult to replace?

Step 4: Review commercial incentives

Determine whether the provider benefits from:

• More labor
• More tickets
• More cloud usage
• Better outcomes
• Automation
• Fewer incidents

Step 5: Review AI use

Require visibility into:

• Models
• Agents
• Customer data
• Review processes
• Intellectual property
• Cost savings

Step 6: Strengthen internal ownership

Retain:

• Architects
• Product owners
• Security leaders
• Data leaders
• Vendor managers
• Critical technical experts

Step 7: Build exit readiness

Ensure access to:

• Documentation
• Data
• Source code
• Configuration
• Runbooks
• Knowledge transfer

Key Takeaways

1. IT outsourcing is moving from labor arbitrage toward technology, expertise, automation, and measurable value.

2. AI is changing service delivery, staffing models, pricing, quality control, and accountability.

3. Outcome-based pricing and gainsharing are becoming more important, although they require carefully defined baselines.

4. Specialist provider ecosystems are replacing the assumption that one supplier can do everything well.

5. Cloud migration is no longer the main destination; continuous cloud management and optimization are more important.

6. Cybersecurity and third-party resilience are now core outsourcing priorities.

7. Provider talent quality and retention remain critical service-continuity factors.

8. Location strategy is becoming driven by resilience, geopolitics, data rules, and skills, not only cost.

9. Labor-based billing becomes less defensible as AI performs more delivery work.

10. Long, rigid contracts are poorly suited to fast-changing technology economics.

11. Traditional SLAs should be supplemented with experience, value, security, and modernization measures.

12. Companies should never allow providers to become the only parties capable of understanding critical systems.

13. Metaverse-related sourcing has cooled relative to AI, although spatial and digital-twin use cases remain relevant.

14. The strongest sourcing model is usually a managed ecosystem rather than total insourcing or total outsourcing.

15. Internal strategy, architecture, security, data, and vendor-governance capabilities remain essential.

Frequently Asked Questions

What are the hottest IT outsourcing trends?

The strongest current trends include:

• AI-enabled services
• Outcome-based pricing
• Specialist provider ecosystems
• Cloud optimization
• Cybersecurity services
• Talent ecosystems
• Regional diversification

Which outsourcing trends are declining?

Declining practices include:

• Labor arbitrage as the only value proposition
• One-stop outsourcing
• Cloud migration as the final objective
• Offshore-first sourcing
• Rigid long-term contracts
• SLA-only management
• Outsourcing internal understanding

Is offshore outsourcing disappearing?

No. Offshore delivery remains important, but it is increasingly combined with onshore, nearshore, remote, and automated delivery.

Is one large outsourcing provider better than several specialists?

It may simplify governance, but it can reduce specialization and increase lock-in. Several specialists may improve expertise but require stronger integration.

What is outcome-based outsourcing?

It links some provider compensation to measurable service or business outcomes.

What is gainsharing?

Gainsharing allows a provider to receive an agreed portion of measurable value or savings it helps create.

How is AI changing outsourcing?

AI can reduce manual labor, improve service speed, automate workflows, and change provider pricing. It also introduces new risks involving data, accountability, security, and intellectual property.

Should companies pay providers by headcount?

Headcount pricing may remain appropriate for some services. It becomes less attractive when automation and AI significantly reduce the connection between labor volume and value.

Is cloud outsourcing still growing?

Yes. The emphasis is increasingly shifting from initial migration toward operations, optimization, security, FinOps, resilience, and modernization.

Why is provider cybersecurity risk important?

Providers may have privileged access to critical systems and data. A provider incident can become a customer incident.

What is a provider ecosystem?

It is a coordinated group of cloud providers, consulting firms, managed-service providers, software vendors, specialists, and other partners.

What should remain internal?

Organizations should retain strong ownership of:

• Strategy
• Architecture
• Product direction
• Cybersecurity leadership
• Data governance
• AI governance
• Vendor management

Why are SLAs not enough?

SLAs measure technical service performance but may not measure user experience, business outcomes, cost improvement, security, or innovation.

Are long outsourcing contracts always bad?

No. Long relationships can support investment and continuity. The agreement should remain adaptable as technology, pricing, and business needs change.

What replaced the metaverse as a major sourcing focus?

Generative AI, agentic systems, AI-enabled automation, cloud operations, cybersecurity, and data services now receive much greater attention.

How can companies avoid vendor lock-in?

They can preserve:

• Internal expertise
• Documentation
• Portable data
• Standard interfaces
• Exit rights
• Alternative suppliers
• Modular architecture

Conclusion

The outsourcing market has not abandoned its past. Cost, offshore delivery, SLAs, cloud migration, and large providers still matter. What has changed is their position within a broader value system. Cost is no longer enough. Migration is no longer the destination. Labor volume is no longer the best measure of provider capability. One large vendor is no longer assumed to be the best answer for every technology need.

The market is moving toward a more flexible model built from:

• Specialized providers
• Managed platforms
• AI-enabled delivery
• Outcome-based incentives
• Regional resilience
• Strong internal governance

The 2022 CIO article correctly anticipated several elements of this shift, including gainsharing, advanced automation, specialist ecosystems, talent pressure, geopolitical risk, and declining reliance on SLA-only governance. The most significant new force is AI. AI changes both sides of the outsourcing relationship. Customers need external help deploying AI. Providers are using AI to change how they deliver services.

This creates an unavoidable commercial question:

When AI allows the provider to perform the same work with fewer people, who receives the value? The answer should not be left to chance.

It should be built into:

• Pricing
• Governance
• Transparency
• Performance measures
• Intellectual-property terms
• Data protections

The future of outsourcing will not be defined by who can provide the largest workforce at the lowest hourly price.

It will be defined by who can combine:

• Human expertise
• Automated platforms
• AI agents
• Cybersecurity
• Industry knowledge
• Operational resilience

to produce outcomes that the customer can measure and govern.

The defining question is no longer:

Which outsourcing trend is hot?

It is:

Which sourcing model gives our organization the best combination of value, expertise, speed, resilience, transparency, and strategic control?

Relevant Articles and Resources

1. 7 Hot IT Outsourcing Trends and 7 Going Cold

CIO’s original 2022 analysis of gainsharing, provider talent, automation, geopolitical disruption, cybersecurity, cloud migration, specialist ecosystems, and changing SLA models.

2. Rewriting the Outsourcing Playbook: AI, Automation, and Platforms

KPMG’s current analysis of the shift from people arbitrage toward AI, automation, flexible delivery, platforms, and outcome-oriented services.

3. Five Key Trends Reshaping Managed Services

KPMG’s perspective on the declining relevance of transactional, set-it-and-forget-it outsourcing and the rise of strategic, adaptable provider relationships.

4. The State of the Managed Services Market in 2025

KPMG’s review of outcome-based managed services, transformation, cybersecurity, SaaS, and blended nearshore, onshore, and offshore models.

5. The State of Managed Services 2025

TSIA research on customer success, AI-enabled service delivery, and movement away from cost-plus pricing.

6. Global Cybersecurity Outlook 2025

World Economic Forum research on cyber complexity, geopolitical risk, supply-chain interdependence, and emerging technologies.

7. IT Outsourcing Explained

CIO’s broader guide to outsourcing strategies, models, benefits, and risks.