Flevy Management Insights Q&A
How should companies approach the make-or-buy decision in highly regulated industries differently?


This article provides a detailed response to: How should companies approach the make-or-buy decision in highly regulated industries differently? For a comprehensive understanding of Make or Buy, we also include relevant case studies for further reading and links to Make or Buy best practice resources.

TLDR In highly regulated industries, companies must adopt a comprehensive approach to the make-or-buy decision, considering Regulatory Compliance, Risk Management, Strategic Alignment, and long-term implications for sustainable success.

Reading time: 5 minutes

Before we begin, let's review some important management concepts, as they related to this question.

What does Regulatory Compliance mean?
What does Risk Management mean?
What does Strategic Alignment mean?
What does Total Cost of Ownership (TCO) mean?


In highly regulated industries such as healthcare, finance, and energy, the make-or-buy decision becomes significantly more complex due to the additional layers of compliance, risk management, and stakeholder considerations. Organizations in these sectors must navigate a labyrinth of regulations that can vary not just by country but also by state or region within countries. This complexity necessitates a more nuanced approach to deciding whether to produce in-house or outsource services and products.

Understanding Regulatory Implications

First and foremost, organizations must have a deep understanding of the regulatory environment in which they operate. This involves not just the current state of regulations but also an informed perspective on potential future changes. Regulatory compliance is a moving target, and what may be a compliant solution today could become non-compliant tomorrow if regulations change. For instance, the healthcare industry is subject to stringent regulations like HIPAA in the United States, which governs the privacy and security of certain health information. A decision to outsource any service handling protected health information (PHI) not only requires due diligence to ensure the vendor is currently compliant but also that they have the agility to remain compliant as regulations evolve.

Organizations should establish a dedicated regulatory compliance team or function, which is tasked with continuously monitoring the regulatory landscape. This team should work closely with both the strategic sourcing and risk management functions to ensure that all make-or-buy decisions are made with a clear understanding of the regulatory implications. Engaging with legal and industry-specific consultants can provide additional insights and help organizations navigate these complex waters.

Moreover, it's crucial for organizations to factor in the cost of compliance into the make-or-buy analysis. Compliance costs can significantly impact the total cost of ownership (TCO) of a product or service. For example, the financial industry's compliance costs related to anti-money laundering (AML) and know your customer (KYC) regulations can be substantial. These costs must be carefully weighed against the benefits of outsourcing or the potential for in-house efficiencies.

Are you familiar with Flevy? We are you shortcut to immediate value.
Flevy provides business best practices—the same as those produced by top-tier consulting firms and used by Fortune 100 companies. Our best practice business frameworks, financial models, and templates are of the same caliber as those produced by top-tier management consulting firms, like McKinsey, BCG, Bain, Deloitte, and Accenture. Most were developed by seasoned executives and consultants with 20+ years of experience.

Trusted by over 10,000+ Client Organizations
Since 2012, we have provided best practices to over 10,000 businesses and organizations of all sizes, from startups and small businesses to the Fortune 100, in over 130 countries.
AT&T GE Cisco Intel IBM Coke Dell Toyota HP Nike Samsung Microsoft Astrazeneca JP Morgan KPMG Walgreens Walmart 3M Kaiser Oracle SAP Google E&Y Volvo Bosch Merck Fedex Shell Amgen Eli Lilly Roche AIG Abbott Amazon PwC T-Mobile Broadcom Bayer Pearson Titleist ConEd Pfizer NTT Data Schwab

Risk Management and Quality Control

Risk management takes on an elevated role in highly regulated industries. When considering outsourcing, organizations must conduct thorough due diligence to ensure potential vendors not only meet current quality and regulatory standards but also have robust processes in place for risk management and quality control. This includes evaluating the vendor's track record, financial stability, and their ability to respond to and recover from disruptive events. For instance, a pharmaceutical company outsourcing the production of a key drug component needs to ensure the supplier has stringent quality control measures that comply with regulatory standards such as those set by the FDA in the United States or the EMA in Europe.

Organizations should also consider the implications of supply chain disruptions, which have been highlighted by recent global events such as the COVID-19 pandemic. The reliance on third-party vendors in different geographic locations can introduce additional risks, including regulatory risks if those vendors are subject to different regulatory regimes. Strategic Planning in this context involves not just selecting the right vendors but also planning for contingencies, such as having multiple approved vendors or considering near-shoring options to reduce risk.

Furthermore, the integration of governance target=_blank>Environmental, Social, and Governance (ESG) considerations into risk management and decision-making processes is becoming increasingly important. Organizations are being held accountable not just for their own compliance and performance but also for that of their suppliers. This adds another layer of complexity to the make-or-buy decision, as organizations must ensure their vendors adhere to acceptable ESG standards, which can also be subject to regulation in certain industries.

Strategic Alignment and Long-term Considerations

In highly regulated industries, the make-or-buy decision should be closely aligned with the organization's overall strategy and long-term objectives. This involves considering how the decision will impact the organization's ability to innovate, maintain operational excellence, and achieve sustainable growth. For example, in the energy sector, companies facing regulations related to carbon emissions might decide to invest in in-house renewable energy capabilities rather than outsourcing to ensure they have direct control over their compliance and sustainability efforts.

Organizations must also consider the impact of their decisions on stakeholder relationships, including customers, regulators, and the broader community. In industries like healthcare, where trust and reputation are paramount, decisions related to outsourcing can have significant implications. A decision to outsource patient data processing, for instance, requires careful consideration of how it might affect patient trust and the organization's reputation.

Finally, organizations in highly regulated industries should take a long-term view of the make-or-buy decision, considering not just immediate costs and benefits but also how the decision fits into the organization's future growth and adaptation to changing regulations. This might involve investing in in-house capabilities to ensure greater control and flexibility or developing strategic partnerships with vendors who can provide not just services or products but also regulatory expertise and innovation.

In conclusion, the make-or-buy decision in highly regulated industries requires a comprehensive approach that goes beyond traditional cost and capability analyses. Organizations must carefully consider regulatory compliance, risk management, strategic alignment, and the long-term implications of their decisions. By doing so, they can not only navigate the complexities of their regulatory environments but also position themselves for sustainable success.

Best Practices in Make or Buy

Here are best practices relevant to Make or Buy from the Flevy Marketplace. View all our Make or Buy materials here.

Did you know?
The average daily rate of a McKinsey consultant is $6,625 (not including expenses). The average price of a Flevy document is $65.

Explore all of our best practices in: Make or Buy

Make or Buy Case Studies

For a practical understanding of Make or Buy, take a look at these case studies.

Telecom Infrastructure Outsourcing Strategy

Scenario: The organization is a regional telecom operator facing increased pressure to modernize its infrastructure while managing costs.

Read Full Case Study

Defense Procurement Strategy for Aerospace Components

Scenario: The organization is a major player in the aerospace defense sector, grappling with the decision to make or buy critical components.

Read Full Case Study

Customer Loyalty Program Development in the Cosmetics Industry

Scenario: The organization is a multinational cosmetics enterprise seeking to enhance its competitive edge by establishing a customer loyalty program.

Read Full Case Study

Make or Buy Decision Analysis for a Global Electronics Manufacturer

Scenario: A global electronics manufacturer is grappling with escalating operational costs and supply chain complexities.

Read Full Case Study

Luxury Brand E-commerce Platform Decision

Scenario: A luxury fashion house is grappling with the decision to develop an in-house e-commerce platform or to leverage an existing third-party solution.

Read Full Case Study

Global Supply Chain Optimization Strategy for Industrial Metals Distributor

Scenario: An established industrial metals distributor is facing a critical "make or buy" decision to improve its global supply chain efficiency.

Read Full Case Study

Explore all Flevy Management Case Studies

Related Questions

Here are our additional questions you may be interested in.

What role does corporate social responsibility (CSR) play in the Build vs. Buy decision-making process?
Integrating Corporate Social Responsibility (CSR) into Strategic Planning and Operational Excellence influences the Build vs. Buy decision, enhancing brand reputation, sustainability, and market competitiveness. [Read full explanation]
What are the key indicators that suggest a company should pivot from a "Buy" to a "Build" strategy, or vice versa, in response to market changes?
Discover when to pivot from a Buy to a Build strategy (or vice versa) by evaluating Cost, Time to Market, Core Competencies, and Strategic Fit for competitive advantage. [Read full explanation]
What is a make or buy analysis?
A make or buy analysis is a strategic framework for deciding whether to produce a product in-house or purchase it from an external supplier, considering cost, quality, and risk. [Read full explanation]
What impact do global supply chain disruptions have on the make-or-buy decision-making process?
Global supply chain disruptions significantly impact the make-or-buy decision-making process, emphasizing Risk Management, Strategic Alignment, Operational Excellence, and the need for agility, resilience, and innovation in sourcing strategies. [Read full explanation]
How is the rise of artificial intelligence and automation shaping the make-or-buy decision landscape?
The rise of AI and automation is transforming the make-or-buy decision process, impacting Cost, Operational Excellence, Innovation, and Competitive Strategy, necessitating a nuanced Strategic Planning approach. [Read full explanation]
How can companies effectively measure and compare the innovation potential of Build vs. Buy options?
Organizations can evaluate the innovation potential of Build vs. Buy options by conducting Skills and Capabilities Assessments, Financial Analyses, and Risk Assessments, employing Decision Matrices and Scenario Planning to align with Strategic Planning and Innovation Strategy. [Read full explanation]

Source: Executive Q&A: Make or Buy Questions, Flevy Management Insights, 2024


Flevy is the world's largest knowledge base of best practices.


Leverage the Experience of Experts.

Find documents of the same caliber as those used by top-tier consulting firms, like McKinsey, BCG, Bain, Deloitte, Accenture.

Download Immediately and Use.

Our PowerPoint presentations, Excel workbooks, and Word documents are completely customizable, including rebrandable.

Save Time, Effort, and Money.

Save yourself and your employees countless hours. Use that time to work on more value-added and fulfilling activities.




Read Customer Testimonials



Download our FREE Strategy & Transformation Framework Templates

Download our free compilation of 50+ Strategy & Transformation slides and templates. Frameworks include McKinsey 7-S Strategy Model, Balanced Scorecard, Disruptive Innovation, BCG Experience Curve, and many more.