Outsourcing in Steel Manufacturing: Make-or-Buy Guide

Steel manufacturers continuously face decisions about which capabilities should remain inside the organization and which can be obtained more effectively from external specialists.

Maintenance, logistics, laboratory testing, facilities management, information technology, security and administrative services are all potential candidates for outsourcing.

But outsourcing is not automatically a cost-reduction strategy.

A supplier quotation may appear lower than the internal cost of performing an activity while creating additional expenses through contract management, mobilization, supervision, downtime, change orders, supplier dependency or loss of technical knowledge.

Conversely, keeping every capability in-house can require capital, specialized personnel, training, equipment and management resources that could be obtained more efficiently from specialized providers.

The correct question is therefore not:

What activities can we outsource?

It is:

Which operating model provides the best combination of total cost, performance, risk and strategic control?

This makes outsourcing fundamentally a make-or-buy decision.

In steel manufacturing, that decision must consider another important distinction:

Strategic Importance ≠ Operational Criticality

An activity can be outside the company’s core competitive competence while remaining critical to safety, quality or production continuity.

Effective outsourcing therefore requires much more than replacing internal labor with an external contract.

It requires disciplined economic analysis, supplier qualification, contract design, performance management, risk control and governance.

1. What Outsourcing Really Means in Steel Manufacturing

Outsourcing occurs when an organization obtains an activity, service or capability from an external provider rather than performing the complete scope internally.

Potential examples in steel operations include:

facilities services;
security;
specialized maintenance;
inspection;
laboratory testing;
non-destructive testing;
logistics;
warehousing;
IT support;
OT specialist services;
payroll;
document management;
environmental services;
specialized engineering.

However, outsourcing does not necessarily mean transferring complete responsibility for the underlying business outcome.

A contractor may execute maintenance while the steelmaker retains responsibility for asset strategy.

A laboratory may perform testing while the manufacturer retains responsibility for product conformity.

A logistics provider may transport coils while the steelmaker retains responsibility for customer delivery performance.

A cybersecurity provider may operate specific systems while the plant retains responsibility for its overall cyber-risk governance.

This distinction between execution and ownership is fundamental.

2. Outsourcing Is a Make-or-Buy Decision

The traditional make-or-buy question asks whether an activity should be:

Made internally

or:

Bought externally

But modern industrial operations offer more alternatives.

An activity can be:

fully in-house;
partially outsourced;
co-sourced;
contracted as a managed service;
purchased from specialists on demand;
executed through a long-term strategic partnership.

Therefore, the objective is not simply to choose between employees and contractors.

It is to design the most appropriate operating model.

The decision should consider:

Cost + Capability + Performance + Risk + Control

3. Why “Core vs Non-Core” Is Not Enough

A common outsourcing principle is:

Keep core activities internal and outsource non-core activities.

This is useful as an initial concept, but it is insufficient for steel manufacturing.

Consider activities such as:

electrical substation maintenance;
industrial gases;
refractory services;
water treatment;
crane maintenance;
NDT;
cybersecurity;
coil handling.

Some may not differentiate the company’s steel commercially.

Yet failure can cause:

production interruption;
safety incidents;
quality losses;
environmental events;
equipment damage;
delivery failures.

Therefore, outsourcing decisions require at least two dimensions:

Strategic Importance

and:

Operational Criticality

4. Strategic Importance and Operational Criticality

Strategic importance asks:

Does this capability contribute directly to competitive differentiation, proprietary knowledge or long-term industrial advantage?

Operational criticality asks:

What happens to safety, production, quality or compliance if this activity fails?

This creates four broad decision situations:

Strategic Importance	Operational Criticality	Typical Direction
Low	Low	Strong outsourcing candidate
Low	High	Outsourcing possible, but requires strong governance and contingency
High	Low	Selective outsourcing or co-sourcing
High	High	Strong case for internal control or tightly governed strategic partnership

This matrix is not an automatic decision rule.

It is a screening mechanism for determining how much analysis and control the activity requires.

5. Non-Core Does Not Mean Non-Critical

This distinction deserves special emphasis.

Industrial cleaning in an administrative building may be both non-core and relatively low criticality.

Cleaning around sensitive process equipment may have very different consequences.

Routine landscaping and crane maintenance are both services, but their failure modes are not comparable.

Therefore:

Non-Core ≠ Low Risk

Before considering outsourcing, determine the consequences of service failure.

Questions include:

Can production stop?
Can product quality be affected?
Can personnel be exposed to hazards?
Can environmental compliance be affected?
Can customer delivery be interrupted?
How quickly can the service be restored?

The higher the consequence, the stronger the governance required.

6. In-House, Outsourcing, Co-Sourcing and Managed Services

Outsourcing decisions should recognize different operating models.

In-House

The organization owns the capability and primarily uses internal personnel, systems and resources.

This can provide:

direct control;
knowledge retention;
rapid internal coordination;
strong alignment with plant priorities.

But it can also require substantial fixed cost and specialist capability.

Outsourced Service

A provider performs a clearly defined scope under contractual requirements.

This model works well when boundaries and outputs can be defined.

Co-Sourcing

Internal and external resources work together.

This can be useful when the plant wants to retain technical ownership while accessing specialist expertise.

Managed Service

The supplier assumes broader responsibility for delivering an agreed service level or outcome.

Governance becomes particularly important because operational responsibility is wider.

Specialist or On-Demand Service

External expertise is purchased only when needed.

Examples can include specialist inspections, advanced diagnostics or uncommon engineering work.

No single model is universally superior.

7. The Make-or-Buy Decision Should Start With Requirements

Companies sometimes start outsourcing analysis by requesting supplier quotations.

That is too early.

First define:

scope;
required output;
technical standards;
service levels;
critical interfaces;
required response time;
safety requirements;
regulatory requirements;
internal responsibilities.

Otherwise, the company may compare an internal activity with a supplier proposal covering a different scope.

The sequence should be:

Define Requirement → Establish Internal Baseline → Evaluate External Alternatives → Compare Total Cost and Risk

8. Internal Cost Is More Than Payroll

One of the most common errors in make-or-buy analysis is comparing the vendor price only with employee salaries.

Internal delivery may require:

wages;
benefits;
supervision;
overtime;
training;
certifications;
tools;
vehicles;
equipment;
software;
facilities;
spare parts;
administrative support.

Some costs are fixed.

Others are variable.

Some will disappear if the activity is outsourced.

Others will remain.

This distinction matters because an accounting allocation is not automatically an avoidable cost.

9. Avoidable Cost Matters More Than Allocated Cost

Suppose an internal department is allocated corporate overhead.

If the activity is outsourced, the corporate overhead may remain.

Treating the entire allocation as an outsourcing saving would overstate the economic benefit.

Therefore, make-or-buy analysis should distinguish:

Allocated Cost

from:

Avoidable Cost

The key question is:

Which costs actually disappear, decrease or change if the operating model changes?

This is more economically meaningful than simply comparing departmental accounting totals.

10. External Cost Is More Than the Vendor Quote

The same discipline applies to the outsourced alternative.

External total cost can include:

contract price;
mobilization;
transition;
contract administration;
supplier supervision;
audits;
access management;
training;
change orders;
escalation;
contingency;
switching costs.

If outsourcing causes downtime or performance deterioration, those effects may also become economically relevant.

Therefore:

Vendor Quote ≠ Total Outsourced Cost

just as:

Payroll ≠ Total Internal Cost

11. Build a Comparable Total-Cost Model

A useful comparison is:

Internal Model	External Model
Direct labor	Contract price
Benefits	Mobilization
Supervision	Contract management
Training	Supplier onboarding
Equipment	Interface costs
Tools	Audits
Software	Change orders
Facilities	Contingency
Certifications	Supplier transition
Internal support	Switching/exit costs
Downtime consequences	Supplier-failure consequences

The exact categories depend on the service.

The principle is to compare equivalent economic boundaries.

12. Do Not Assume Outsourcing Converts All Fixed Cost Into Variable Cost

Outsourcing can increase cost flexibility, but the effect depends on contract structure.

A long-term contract with minimum volumes and fixed monthly charges can behave much like a fixed cost.

A unit-rate contract may vary more directly with activity.

A call-off specialist contract may be highly variable.

Therefore, the statement:

Outsourcing = Variable Cost

is too simplistic.

The correct question is:

How does the proposed contract change the company’s cost behavior?

13. Economies of Scale Can Create a Genuine Outsourcing Advantage

Specialized providers may serve multiple industrial customers.

This can allow them to spread the cost of:

specialist personnel;
advanced tools;
software;
calibration;
training;
vehicles;
specialized equipment.

This is one of the strongest economic arguments for outsourcing.

A steel plant may not need enough utilization to justify owning a specialized capability continuously.

A provider serving many plants may achieve much higher utilization.

However, scale advantage should be demonstrated rather than assumed.

14. Capacity Flexibility Can Also Create Value

Demand for some industrial services varies considerably.

Examples include:

shutdown maintenance;
major inspections;
project engineering;
equipment installation;
temporary logistics peaks.

Maintaining enough internal capacity for the maximum workload may create underutilized resources during normal periods.

External providers can sometimes supply temporary capacity more efficiently.

This creates a potential value beyond direct labor cost:

Capacity Flexibility

But availability during industry-wide demand peaks should be verified contractually.

15. Maintenance Outsourcing Requires Special Care

Maintenance is one of the most important outsourcing areas in industrial plants.

Possible outsourced scopes include:

HVAC;
utilities;
electrical systems;
cranes;
lubrication;
vibration analysis;
specialized welding;
refractory services;
instrumentation;
shutdown work.

But maintenance outsourcing should not automatically transfer the plant’s engineering responsibility.

The current ISO 55001:2024 establishes requirements for an asset management system and explicitly applies to organizations delivering asset management activities and service providers.

The central principle should therefore be:

Outsource Execution ≠ Outsource Engineering Ownership

Maintenance outsourcing decisions should also reflect the broader asset strategy discussed in Asset Lifecycle Management in Steel Plants: From Acquisition to Replacement.

16. What Maintenance Knowledge Should the Plant Retain?

Even when maintenance execution is outsourced, the steelmaker may need to retain internal capability for:

asset criticality;
maintenance strategy;
failure analysis;
technical standards;
acceptance criteria;
performance evaluation;
long-term asset decisions.

Otherwise, the organization can gradually lose the ability to determine whether the contractor’s work is technically appropriate.

This creates knowledge dependency.

The more critical the asset, the more important it becomes to define what technical knowledge must remain internal.

17. Reliability Must Remain Visible

An outsourcing contract can inadvertently encourage short-term behavior.

If the provider is paid primarily for corrective work, the commercial model may not naturally reward elimination of recurring failures.

If the provider is evaluated only on response time, it may respond quickly while the same failure continues to occur.

Therefore, maintenance contracts should align commercial incentives with reliability objectives.

Relevant indicators can include:

equipment availability;
repeat failures;
MTTR;
planned maintenance compliance;
backlog;
schedule compliance;
rework.

The exact metrics depend on the scope.

18. Preventive and Predictive Maintenance Still Require Governance

External providers may execute inspections, lubrication, condition monitoring or preventive tasks.

But the steelmaker should understand:

why the task exists;
what failure mode it addresses;
required frequency;
acceptance criteria;
escalation threshold.

Otherwise, outsourcing can preserve inefficient maintenance routines rather than improve them.

This is particularly important when the organization is trying to move from time-based maintenance toward condition- and risk-based strategies.

The distinction between outsourced execution and maintenance strategy becomes especially important when applying the principles described in Predictive Maintenance in Steel Plants: A Practical Engineering Guide to Equipment Reliability.

19. Facilities Services Are Often Strong Outsourcing Candidates

Facilities-related activities can include:

office cleaning;
HVAC;
lighting;
pest control;
grounds maintenance;
building repairs.

These services often have:

well-developed external markets;
measurable outputs;
relatively clear scopes.

They can therefore be strong outsourcing candidates.

However, even apparently simple services require clear boundaries when they enter production areas.

Industrial environments introduce safety, access and operational requirements that do not exist in ordinary commercial facilities.

20. Logistics Outsourcing Should Be Evaluated by Service and Total Cost

Steel logistics can involve:

internal transport;
coil movement;
warehousing;
truck operations;
rail interfaces;
port operations;
outbound delivery.

External logistics providers may offer:

specialized equipment;
transportation networks;
scale;
scheduling capability.

But logistics performance directly affects production and customer service.

A low-cost contract can become expensive if it creates:

damaged products;
late deliveries;
production shortages;
detention;
demurrage;
premium freight.

Therefore, logistics outsourcing should be evaluated through total supply chain impact, not transport price alone.

Logistics outsourcing should therefore be evaluated within the same end-to-end cost and risk framework developed in Steel Supply Chain Optimization: How to Reduce Total Cost, Inventory and Supply Risk.

21. Laboratory Testing and NDT Require Technical Control

External laboratories can provide access to:

chemical analysis;
mechanical testing;
metallography;
non-destructive testing;
specialized equipment.

This can be attractive when utilization does not justify internal investment.

However, outsourcing testing does not remove the manufacturer’s need to control:

applicable standards;
sampling;
traceability;
test methods;
acceptance criteria;
calibration requirements;
reporting;
turnaround time.

A technically incorrect test delivered quickly and cheaply has no value.

22. Quality Responsibility Cannot Simply Be Outsourced

A third party may perform an inspection or test.

But the steelmaker still needs a process for determining:

what must be inspected;
which specification applies;
who evaluates results;
how nonconformities are handled;
who releases the material or product.

This distinction prevents the organization from confusing:

External Testing

with:

External Ownership of Product Quality

23. IT Outsourcing Can Provide Access to Specialized Capability

IT services are frequently outsourced because providers can offer specialized resources for:

infrastructure;
cloud services;
user support;
applications;
networking;
cybersecurity.

This can reduce the need to maintain every technical capability internally.

However, steel plants increasingly depend on interconnected digital systems.

That means IT outsourcing is not only a cost decision.

It is also a dependency and security decision.

24. OT Outsourcing Creates Third-Party Cyber Risk

Operational Technology may include:

PLCs;
SCADA;
industrial networks;
process control systems;
engineering workstations;
remote maintenance connections.

External specialists may require privileged access to these systems.

NIST defines Cybersecurity Supply Chain Risk Management as the identification, assessment and mitigation of risks associated with ICT and OT products and service supply chains across the system life cycle.

Therefore:

External Access = Third-Party Risk

and should be governed accordingly.

25. Control Third-Party Digital Access

Depending on the service, controls may need to address:

user identity;
privileged accounts;
remote access;
network segmentation;
logging;
approved devices;
credential management;
incident notification;
data access;
access termination.

NIST’s current C-SCRM program specifically covers ICT/OT supply chains and supplier risk management.

The objective is not to prevent external expertise from accessing systems.

It is to ensure that access is proportionate, controlled and traceable.

26. Supplier Cyber Due Diligence Is Becoming More Structured

In July 2026, NIST published SP 1326, a due-diligence assessment guide for ICT suppliers. It identifies areas such as provenance, resilience, foundational cyber practices and supply-chain tiers as components of supplier assessment.

For steel manufacturers, the broader lesson is useful:

Do not evaluate a technology provider only by:

technical capability;
price;
response time.

Also evaluate the risks created by the dependency.

27. Safety Must Be Built Into the Outsourcing Model

Steel plants contain significant industrial hazards.

Depending on the facility, contractors may work around:

high temperatures;
molten materials;
cranes;
mobile equipment;
electrical systems;
confined spaces;
elevated work;
gases;
chemicals.

Therefore, contractor selection based primarily on commercial price can create unacceptable exposure.

Safety should be integrated into:

Qualification → Contract → Onboarding → Work Execution → Monitoring → Review

28. Contractor Qualification Comes Before Mobilization

Before a contractor begins work, qualification may consider:

technical competence;
relevant experience;
required licenses;
certifications;
safety performance;
personnel qualifications;
equipment suitability;
insurance;
financial condition;
subcontractor controls.

The depth of qualification should reflect the risk of the activity.

A landscaping contractor and a high-voltage maintenance contractor should not require identical qualification processes.

29. Contractor Onboarding Is an Operational Control

Even technically competent suppliers may be unfamiliar with a specific plant.

Onboarding can include:

site rules;
hazard communication;
emergency procedures;
access restrictions;
work permits;
reporting lines;
communication protocols.

The objective is to integrate external personnel into the plant’s operating controls without confusing contractor employment with internal employment.

30. Compliance Obligations Must Be Explicitly Allocated

Contracts should define who performs specific compliance-related activities.

However, contractual allocation does not necessarily eliminate the steelmaker’s own legal, regulatory or management responsibilities.

ISO 37500 explicitly recognizes that outsourcing arrangements must be adapted to applicable environmental, labor, health and safety laws and regulations and that responsibilities across the outsourcing life cycle require appropriate allocation.

Therefore:

Contractual Responsibility ≠ Automatic Elimination of Client Risk

The applicable legal position always depends on jurisdiction and activity.

31. Supplier Selection Should Be Multicriteria

Vendor selection should normally consider more than price.

Potential dimensions include:

technical capability;
industrial experience;
safety;
quality;
capacity;
response time;
financial stability;
cybersecurity;
staffing;
equipment;
business continuity;
references;
total cost.

Weights should reflect the criticality of the service.

A low-risk administrative service and a critical maintenance contract should not use identical supplier-selection criteria.

32. Due Diligence Should Match Supplier Criticality

Not every supplier requires the same level of investigation.

A useful principle is:

Higher Dependency + Higher Consequence = Deeper Due Diligence

For critical suppliers, assessment may include:

ownership;
financial condition;
operational capacity;
key personnel;
subcontracting;
cybersecurity;
geographic exposure;
continuity plans;
insurance.

The objective is to understand the dependency before creating it.

33. Scope Definition Is the Foundation of the Contract

Poorly defined scope is one of the most common sources of outsourcing disputes.

A good scope should clarify:

included services;
excluded services;
service boundaries;
interfaces;
operating hours;
required resources;
standards;
documentation;
deliverables.

If the scope is ambiguous, vendor quotations may not be comparable.

After award, ambiguity often reappears as:

change orders;
disputes;
delays;
unplanned cost.

34. Service Levels Must Describe the Required Outcome

A Service Level Agreement should convert expectations into measurable requirements.

Depending on the service, examples include:

response time;
restoration time;
availability;
turnaround time;
delivery performance;
inspection completion;
accuracy;
schedule compliance.

A statement such as “provide good service” is not measurable.

A useful service level defines:

Requirement → Measurement → Target → Responsibility

35. KPIs Need Precise Definitions

A contract can contain many KPIs and still be poorly controlled.

Every important KPI should have:

numerator;
denominator;
measurement boundary;
data source;
frequency;
owner;
decision purpose.

Examples include:

KPI	Possible Purpose
SLA Compliance	Measure contractual service delivery
Response Time	Measure speed of initial response
MTTR	Measure restoration performance
Availability	Measure service/equipment availability
Planned Maintenance Compliance	Measure execution discipline
Rework Rate	Detect poor service quality
Cost per Test	Monitor laboratory economics
Cost per Tonne Handled	Monitor logistics economics
OTIF	Monitor delivery performance
Safety Events	Monitor contractor safety performance

The goal is not maximum measurement.

It is actionable measurement.

Outsourced-service indicators should follow the same measurement discipline used for manufacturing KPIs in Steel Production Performance: A Practical Guide to KPIs, Yield, Quality and Efficiency.

36. Avoid KPI Gaming

Metrics can create unintended behavior.

If a maintenance contractor is measured only on response time, teams may prioritize rapid attendance over permanent failure elimination.

If logistics is measured only on cost per tonne, service reliability may deteriorate.

If a laboratory is measured only on turnaround time, quality controls may come under pressure.

Therefore, KPI design should balance:

Cost + Quality + Service + Risk

This is another reason outsourcing governance cannot be reduced to vendor-price management.

37. Contract Pricing Model Changes Behavior

Common commercial structures include:

Fixed Price

Useful where scope and workload are sufficiently predictable.

Unit Rate

Payment depends on units such as:

hours;
tonnes;
tests;
interventions.

Time and Materials

Useful where scope is uncertain but requires strong cost control.

Performance-Based

Payment is linked partly to agreed outcomes.

Hybrid

Combines different mechanisms.

The commercial model should match the nature of the work.

38. Performance-Based Contracts Need Carefully Designed Incentives

Performance-based arrangements can align supplier behavior with plant objectives.

But incentives must be designed carefully.

For example, rewarding maintenance solely for low spending can encourage deferred work.

Rewarding only availability can encourage excessive maintenance expenditure.

A balanced model may need multiple dimensions.

The principle is:

Reward the Desired System Outcome — Not an Isolated Metric

39. Change Orders Can Destroy the Original Business Case

An attractive tender price can become expensive when the contract scope is incomplete.

Repeated change orders can result from:

unclear boundaries;
underestimated workload;
plant modifications;
incomplete asset data;
excluded activities.

Therefore, make-or-buy analysis should consider not only tender price but also:

Expected Contract Variability

Tracking change orders separately can reveal whether the original scope was realistic.

40. Knowledge Retention Must Be Designed Before Outsourcing

Outsourcing can gradually transfer practical knowledge from the plant to the provider.

This may include:

failure history;
equipment behavior;
process interfaces;
troubleshooting;
configuration knowledge.

Some transfer is natural.

The risk appears when the company becomes unable to:

evaluate supplier performance;
challenge technical decisions;
change providers;
bring the activity back in-house.

Knowledge retention should therefore be designed into the operating model.

41. Documentation Is Part of Knowledge Retention

Depending on the service, contracts can require controlled documentation such as:

maintenance records;
drawings;
configurations;
inspection reports;
test results;
failure reports;
procedures;
asset history.

The company should know:

who owns the data;
where it is stored;
what format is required;
how it will be transferred at contract end.

This is particularly important for long-term technical services.

42. Vendor Lock-In Is a Strategic Cost

Vendor lock-in occurs when changing provider becomes difficult or disproportionately expensive.

Causes can include:

proprietary systems;
undocumented knowledge;
unique tooling;
incompatible data;
exclusive spare-parts arrangements;
loss of internal competence.

A low initial price can therefore create high future switching cost.

This means:

Exit Cost Belongs in the Outsourcing Decision

even if the exit occurs years later.

43. Every Critical Outsourcing Arrangement Needs an Exit Strategy

An exit strategy answers:

How can another supplier take over?
What data must be transferred?
What documentation must be current?
What happens to equipment?
How are credentials revoked?
How long is transition support required?
Can the service temporarily return in-house?

Exit planning is not evidence that the relationship is expected to fail.

It is sound dependency management.

44. Business Continuity Must Include Supplier Failure

Critical outsourced services should be included in continuity planning.

Scenarios can include:

supplier insolvency;
labor shortage;
cyber incident;
loss of key personnel;
equipment failure;
regional disruption;
abrupt contract termination.

For each critical service, ask:

How long can the plant operate without it?

What alternative exists?

How quickly can that alternative be activated?

This converts supplier dependency into a manageable risk.

45. Outsourcing Governance Continues After Contract Award

The contract is the beginning of supplier management, not the end.

Governance can include:

operational meetings;
KPI review;
safety review;
cost review;
issue escalation;
improvement plans;
audits;
strategic reviews.

ISO 37500 treats outsourcing as a life-cycle arrangement requiring governance and collaboration between client and provider rather than as a one-time procurement event.

The governance intensity should reflect service criticality.

46. Periodic and Event-Driven Reviews Are Better Than a Fixed Rule

There is no universal reason every outsourcing contract should be reconsidered on exactly the same annual cycle.

Reviews can be:

periodic;
milestone-based;
event-driven.

Trigger events can include:

persistent SLA deterioration;
major cost escalation;
serious safety incident;
repeated change orders;
plant expansion;
technology change;
supplier financial deterioration;
significant cyber incident.

The purpose is to confirm that the original make-or-buy logic remains valid.

47. Common Outsourcing Mistakes in Steel Manufacturing

Outsourcing Because the Vendor Quote Is Lower Than Payroll

This ignores internal and external total cost.

Assuming Non-Core Means Low Risk

An activity can be strategically non-core and operationally critical.

Outsourcing Without a Reliable Internal Cost Baseline

Without a baseline, savings cannot be demonstrated.

Transferring Execution and Losing Technical Ownership

The company can become unable to evaluate its own contractor.

Selecting Critical Suppliers Primarily by Price

Low price cannot compensate for unacceptable safety, reliability or capability.

Writing an Ambiguous Scope

Poor boundaries create disputes and change orders.

Using Too Many KPIs

More metrics do not automatically create better control.

Using the Wrong KPI

An isolated metric can encourage undesirable behavior.

Ignoring Third-Party Cyber Risk

External IT/OT access creates dependency and security exposure.

Allowing Knowledge to Leave the Organization

Long-term dependency can become expensive.

Ignoring Exit Costs

Switching difficulty is part of total cost.

Treating Contract Award as the End of the Process

Outsourcing requires continuing governance.

48. A Practical Make-or-Buy Roadmap

Step 1 — Define the Activity

Document exactly what is being evaluated.

Step 2 — Assess Strategic Importance

Determine whether the capability contributes to competitive differentiation or proprietary knowledge.

Step 3 — Assess Operational Criticality

Evaluate consequences for production, safety, quality and compliance.

Step 4 — Define the Required Service

Establish scope, outputs and interfaces.

Step 5 — Establish the Internal Baseline

Measure current cost, performance and risk.

Step 6 — Identify Avoidable Cost

Determine what would actually change after outsourcing.

Step 7 — Identify Alternative Operating Models

Consider in-house, outsourcing, co-sourcing and specialist services.

Step 8 — Build the External Total-Cost Model

Include transition, governance, contingency and exit costs.

Step 9 — Evaluate Supplier Capability

Assess technical, operational, safety and financial capability.

Step 10 — Assess Dependency Risk

Include continuity, knowledge, cybersecurity and concentration.

Step 11 — Design the Contract

Define scope, responsibilities, pricing and change control.

Step 12 — Define SLAs and KPIs

Measure outcomes that matter.

Step 13 — Define Governance

Assign internal ownership and escalation processes.

Step 14 — Protect Knowledge and Data

Specify documentation, access and ownership.

Step 15 — Build the Exit Strategy

Plan transition before dependency becomes difficult to reverse.

Step 16 — Monitor the Business Case

Compare actual performance with the original baseline.

49. How to Verify Whether Outsourcing Actually Reduced Cost

A successful contract should be evaluated against the baseline used to approve it.

Do not measure savings only as:

Previous Budget − Contract Price

Instead evaluate changes in:

direct cost;
supervision;
downtime;
quality;
inventory where applicable;
service performance;
change orders;
internal administration;
incidents;
working capital where relevant.

The business case should distinguish:

Gross Contract Saving

from:

Net Economic Benefit

This prevents savings from being reported while hidden costs accumulate elsewhere.

50. Frequently Asked Questions

Does outsourcing always reduce manufacturing costs?

No. Outsourcing can reduce costs when a provider has superior scale, utilization, expertise or flexibility, but transition, governance, change orders, dependency and performance losses can offset those benefits.

Which activities are the best candidates for outsourcing?

Activities with low strategic differentiation, an established supplier market and clearly measurable outputs are often stronger candidates. Operational criticality must still be evaluated.

Should critical maintenance be outsourced?

It can be, but critical maintenance requires stronger supplier qualification, governance, technical ownership, continuity planning and performance control.

Is outsourcing the same as reducing headcount?

No. Outsourcing is an operating-model decision. Workforce changes may occur in some arrangements, but they do not define outsourcing.

How should a steel plant compare internal and outsourced costs?

Use equivalent total-cost boundaries and distinguish avoidable internal costs from accounting allocations. Include transition, governance, risk and exit costs in the external alternative.

What is co-sourcing?

Co-sourcing combines internal capability with external specialist resources. It can provide access to expertise while retaining important technical knowledge internally.

What is the biggest risk of long-term outsourcing?

There is no universal single largest risk, but important risks include supplier dependency, loss of knowledge, poor performance, safety exposure, cyber risk and vendor lock-in.

How should outsourcing KPIs be selected?

Choose a limited set connected to the required business outcome, with explicit definitions, data sources, boundaries and responsibilities.

Why does outsourcing IT or OT require additional controls?

External technology providers may receive system, data or privileged access. This creates third-party cybersecurity and operational dependencies that require risk management.

Should contracts always be reviewed annually?

Not necessarily. Reviews should occur at appropriate intervals and when significant events change cost, performance, technology or risk.

What is an outsourcing exit strategy?

It is a predefined plan for transferring the service to another supplier or operating model while preserving data, documentation, access control and operational continuity.

How do you know whether outsourcing really worked?

Compare actual total cost, performance, quality and risk after implementation with the documented pre-outsourcing baseline and original business case.

51. Conclusion

Outsourcing in steel manufacturing should never begin with the assumption that external providers are automatically cheaper.

The correct starting point is a make-or-buy question:

What operating model provides the best combination of total cost, capability, performance, risk and strategic control?

Some activities are strong candidates for outsourcing because specialized providers can achieve scale, utilization and expertise that a single plant cannot economically reproduce.

Other activities require greater caution.

A service can be outside the steelmaker’s strategic core while remaining essential to:

production continuity;
safety;
product quality;
environmental performance;
cybersecurity.

This is why the distinction between strategic importance and operational criticality is so important.

Cost analysis must also extend beyond payroll and vendor price.

The appropriate comparison is:

Internal Total Cost and Risk ↔ External Total Cost and Risk

And the decision does not end when the contract is signed.

Effective outsourcing requires:

Supplier Qualification → Clear Scope → Contract Design → SLAs → KPIs → Governance → Knowledge Retention → Continuity → Exit Strategy

ISO 37500 reinforces this life-cycle view by addressing governance, risks, flexibility and collaboration throughout outsourcing arrangements.

For asset-related services, the current ISO 55001:2024 reinforces structured asset-management decision-making and applies to service providers as well as organizations managing their own assets.

For IT and OT services, NIST guidance makes third-party dependency part of cybersecurity supply-chain risk management rather than merely a procurement consideration.

The strongest outsourcing strategy is therefore not the one that externalizes the greatest number of activities.

It is the one that deliberately decides what the steelmaker should own, what specialists should provide, and how both sides will be governed to create sustainable economic value.