Want FREE Templates on Strategy & Transformation? Download our FREE compilation of 50+ slides. This is an exclusive promotion being run on LinkedIn.







Flevy Management Insights Q&A
How should companies approach the make-or-buy decision in highly regulated industries differently?


This article provides a detailed response to: How should companies approach the make-or-buy decision in highly regulated industries differently? For a comprehensive understanding of Make or Buy, we also include relevant case studies for further reading and links to Make or Buy best practice resources.

TLDR In highly regulated industries, companies must adopt a comprehensive approach to the make-or-buy decision, considering Regulatory Compliance, Risk Management, Strategic Alignment, and long-term implications for sustainable success.

Reading time: 5 minutes


In highly regulated industries such as healthcare, finance, and energy, the make-or-buy decision becomes significantly more complex due to the additional layers of compliance, risk management, and stakeholder considerations. Organizations in these sectors must navigate a labyrinth of regulations that can vary not just by country but also by state or region within countries. This complexity necessitates a more nuanced approach to deciding whether to produce in-house or outsource services and products.

Understanding Regulatory Implications

First and foremost, organizations must have a deep understanding of the regulatory environment in which they operate. This involves not just the current state of regulations but also an informed perspective on potential future changes. Regulatory compliance is a moving target, and what may be a compliant solution today could become non-compliant tomorrow if regulations change. For instance, the healthcare industry is subject to stringent regulations like HIPAA in the United States, which governs the privacy and security of certain health information. A decision to outsource any service handling protected health information (PHI) not only requires due diligence to ensure the vendor is currently compliant but also that they have the agility to remain compliant as regulations evolve.

Organizations should establish a dedicated regulatory compliance team or function, which is tasked with continuously monitoring the regulatory landscape. This team should work closely with both the strategic sourcing and risk management functions to ensure that all make-or-buy decisions are made with a clear understanding of the regulatory implications. Engaging with legal and industry-specific consultants can provide additional insights and help organizations navigate these complex waters.

Moreover, it's crucial for organizations to factor in the cost of compliance into the make-or-buy analysis. Compliance costs can significantly impact the total cost of ownership (TCO) of a product or service. For example, the financial industry's compliance costs related to anti-money laundering (AML) and know your customer (KYC) regulations can be substantial. These costs must be carefully weighed against the benefits of outsourcing or the potential for in-house efficiencies.

Explore related management topics: Risk Management Due Diligence Strategic Sourcing

Are you familiar with Flevy? We are you shortcut to immediate value.
Flevy provides business best practices—the same as those produced by top-tier consulting firms and used by Fortune 100 companies. Our best practice business frameworks, financial models, and templates are of the same caliber as those produced by top-tier management consulting firms, like McKinsey, BCG, Bain, Deloitte, and Accenture. Most were developed by seasoned executives and consultants with 20+ years of experience.

Trusted by over 10,000+ Client Organizations
Since 2012, we have provided best practices to over 10,000 businesses and organizations of all sizes, from startups and small businesses to the Fortune 100, in over 130 countries.
AT&T GE Cisco Intel IBM Coke Dell Toyota HP Nike Samsung Microsoft Astrazeneca JP Morgan KPMG Walgreens Walmart 3M Kaiser Oracle SAP Google E&Y Volvo Bosch Merck Fedex Shell Amgen Eli Lilly Roche AIG Abbott Amazon PwC T-Mobile Broadcom Bayer Pearson Titleist ConEd Pfizer NTT Data Schwab

Risk Management and Quality Control

Risk management takes on an elevated role in highly regulated industries. When considering outsourcing, organizations must conduct thorough due diligence to ensure potential vendors not only meet current quality and regulatory standards but also have robust processes in place for risk management and quality control. This includes evaluating the vendor's track record, financial stability, and their ability to respond to and recover from disruptive events. For instance, a pharmaceutical company outsourcing the production of a key drug component needs to ensure the supplier has stringent quality control measures that comply with regulatory standards such as those set by the FDA in the United States or the EMA in Europe.

Organizations should also consider the implications of supply chain disruptions, which have been highlighted by recent global events such as the COVID-19 pandemic. The reliance on third-party vendors in different geographic locations can introduce additional risks, including regulatory risks if those vendors are subject to different regulatory regimes. Strategic Planning in this context involves not just selecting the right vendors but also planning for contingencies, such as having multiple approved vendors or considering near-shoring options to reduce risk.

Furthermore, the integration of Environmental, Social, and Governance (ESG) considerations into risk management and decision-making processes is becoming increasingly important. Organizations are being held accountable not just for their own compliance and performance but also for that of their suppliers. This adds another layer of complexity to the make-or-buy decision, as organizations must ensure their vendors adhere to acceptable ESG standards, which can also be subject to regulation in certain industries.

Explore related management topics: Strategic Planning Supply Chain Quality Control Environmental, Social, and Governance

Strategic Alignment and Long-term Considerations

In highly regulated industries, the make-or-buy decision should be closely aligned with the organization's overall strategy and long-term objectives. This involves considering how the decision will impact the organization's ability to innovate, maintain operational excellence, and achieve sustainable growth. For example, in the energy sector, companies facing regulations related to carbon emissions might decide to invest in in-house renewable energy capabilities rather than outsourcing to ensure they have direct control over their compliance and sustainability efforts.

Organizations must also consider the impact of their decisions on stakeholder relationships, including customers, regulators, and the broader community. In industries like healthcare, where trust and reputation are paramount, decisions related to outsourcing can have significant implications. A decision to outsource patient data processing, for instance, requires careful consideration of how it might affect patient trust and the organization's reputation.

Finally, organizations in highly regulated industries should take a long-term view of the make-or-buy decision, considering not just immediate costs and benefits but also how the decision fits into the organization's future growth and adaptation to changing regulations. This might involve investing in in-house capabilities to ensure greater control and flexibility or developing strategic partnerships with vendors who can provide not just services or products but also regulatory expertise and innovation.

In conclusion, the make-or-buy decision in highly regulated industries requires a comprehensive approach that goes beyond traditional cost and capability analyses. Organizations must carefully consider regulatory compliance, risk management, strategic alignment, and the long-term implications of their decisions. By doing so, they can not only navigate the complexities of their regulatory environments but also position themselves for sustainable success.

Explore related management topics: Operational Excellence

Best Practices in Make or Buy

Here are best practices relevant to Make or Buy from the Flevy Marketplace. View all our Make or Buy materials here.

Did you know?
The average daily rate of a McKinsey consultant is $6,625 (not including expenses). The average price of a Flevy document is $65.

Explore all of our best practices in: Make or Buy

Make or Buy Case Studies

For a practical understanding of Make or Buy, take a look at these case studies.

Global Supply Chain Optimization Strategy for Industrial Metals Distributor

Scenario: An established industrial metals distributor is facing a critical "make or buy" decision to improve its global supply chain efficiency.

Read Full Case Study

Strategic Make-or-Buy Decision Analysis for Metals Industry Leader

Scenario: A multinational firm in the metals industry faces critical Make-or-Buy decisions amidst fluctuating commodity prices and increasing global competition.

Read Full Case Study

Defense Procurement Strategy for Aerospace Components

Scenario: The organization is a major player in the aerospace defense sector, grappling with the decision to make or buy critical components.

Read Full Case Study

Make or Buy Decision Analysis for a Global Electronics Manufacturer

Scenario: A global electronics manufacturer is grappling with escalating operational costs and supply chain complexities.

Read Full Case Study

Resilience in Retail Expansion for Boutique Fashion Chain in Urban Markets

Scenario: A boutique fashion retail chain is at a crossroads, facing the strategic challenge of deciding whether to build vs.

Read Full Case Study

Sustainable Growth Strategy for Offshore Wind Energy Firm

Scenario: An established offshore wind energy company is at a crossroads, facing the strategic dilemma of make or buy to accelerate its growth and maintain competitiveness.

Read Full Case Study


Explore all Flevy Management Case Studies

Related Questions

Here are our additional questions you may be interested in.

What role do customer expectations play in shaping the Build vs. Buy strategy in today's market?
Customer expectations significantly influence the Build vs. Buy strategy, guiding organizations in Strategic Planning and Innovation to meet market demands and technological advancements. [Read full explanation]
What role does corporate social responsibility (CSR) play in the Build vs. Buy decision-making process?
Integrating Corporate Social Responsibility (CSR) into Strategic Planning and Operational Excellence influences the Build vs. Buy decision, enhancing brand reputation, sustainability, and market competitiveness. [Read full explanation]
How should companies evaluate the scalability of Build vs. Buy options in their IT strategy?
Companies should evaluate Build vs. Buy options in IT strategy by analyzing strategic implications, cost, resource needs, and scalability to align with business objectives and technological requirements. [Read full explanation]
In what ways can Build vs. Buy decisions influence a company's ability to attract and retain top talent?
Build vs. Buy decisions impact an organization's ability to attract and retain top talent by shaping its Innovation Culture, Skill Development opportunities, and Organizational Culture. [Read full explanation]
How do companies assess the impact of Build vs. Buy decisions on their brand reputation and customer trust?
Organizations assess Build vs. Buy impacts on brand reputation and customer trust through Strategic Planning, Risk Management, and Operational Excellence, aligning decisions with core values and market perception. [Read full explanation]
What role does digital transformation play in influencing the make-or-buy decision-making process?
Digital Transformation significantly alters the make-or-buy decision-making process by adding considerations of digital capabilities, innovation potential, and market agility into Strategic Planning, Operational Excellence, and Risk Management. [Read full explanation]
How does the integration of cloud computing influence the Build vs. Buy decision in IT infrastructure?
Cloud computing shifts the Build vs. Buy decision in IT infrastructure towards considerations of cost, scalability, and innovation, impacting Strategic Planning and Digital Transformation. [Read full explanation]
How does the shift towards remote work influence Make vs. Buy decisions in technology infrastructure?
The shift towards remote work has made Make vs. Buy decisions in technology infrastructure more complex, necessitating deeper analysis of cost, scalability, security, compliance, and Strategic Planning to align with organizational goals. [Read full explanation]

Source: Executive Q&A: Make or Buy Questions, Flevy Management Insights, 2024


Flevy is the world's largest knowledge base of best practices.


Leverage the Experience of Experts.

Find documents of the same caliber as those used by top-tier consulting firms, like McKinsey, BCG, Bain, Deloitte, Accenture.

Download Immediately and Use.

Our PowerPoint presentations, Excel workbooks, and Word documents are completely customizable, including rebrandable.

Save Time, Effort, and Money.

Save yourself and your employees countless hours. Use that time to work on more value-added and fulfilling activities.




Read Customer Testimonials



Download our FREE Strategy & Transformation Framework Templates

Download our free compilation of 50+ Strategy & Transformation slides and templates. Frameworks include McKinsey 7-S Strategy Model, Balanced Scorecard, Disruptive Innovation, BCG Experience Curve, and many more.