This is an AMP version of the article, its original content can be found here.
Software Outsourcing Survival Guide
Software outsourcing is what you go for when you want to create a software product but software engineering is not your core competence. It's a smart business practice being employed by everyone from $1,000 personal website owners to Fortune 100 monsters. And all of them fail, to some extent. Actually, it's very difficult not to fail. Here is my list of simple hints to everyone who decides to outsource software development (the most important ones are at the bottom). I wish someone would have given it to me 15 years ago.
Have a "Work for Hire" Agreement. Make sure the contract you have with the software outsourcing team includes something like this: "Parties shall deem all deliverables created by the developer as works made for hire as is defined under the Copyright Law of the United States." This is the shortest and easiest definition of "whatever you create for me is mine." Put this into the contract and the outsourcing company won't be able to claim that the software it created belongs to it, which happens here and there.
Own Your Source Code Repository.
Make sure the source code repository is under your control. The best
way to do this is to create a private GitHub repository for
$7 per month. The repository will be visible and
accessible only by you and your outsourcing team. Moreover, make sure
the team has read-only access and can't change the code directly except
through pull requests. In Git, it's possible to destroy the entire history
with a single "forced" push to the
master branch. So it would be much better
for you to be the only person with write access. To make life simpler,
I would recommend you use Rultor
as a tool for merging those pull requests semi-automatically.
Regularly Collect Metrics. Ask your outsourcing team members to regularly collect metrics from the software they create and send you them somehow (by email, maybe). I would recommend using Hits-of-Code, unit test coverage (or just the total number of unit tests), tickets opened and closed, and build duration. I'm talking here about process metrics. This is not what you're already getting from NewRelic. These metrics will measure the performance of the team, not of the product under development. I'm not saying you should manage the team by the metrics, but you have to keep an eye on these numbers and their dynamics.
Conduct Independent Technical Reviews. I wrote about these already in my You Do Need Independent Technical Reviews! post a few months ago. The importance of such reviews is difficult to overrate. In software outsourcing, they are especially crucial. Actually, this is the best and likely only way of collecting objective information about the software you're getting from the outsourcer. Don't rely on reports, promises, guarantees, and extensive documentation. Instead, hire someone else on an hourly basis and ask that person to review what your outsourcing partner is developing. Do such reviews regularly and systematically. Don't be afraid to offend your programmers. Honestly explain the reviewer's concerns to them. If they are professionals, they will understand and respect your business objectives. You can also show them this article :)
Automate and Control Deployment. Ask your outsourcing team to automate the entire deployment pipeline and keep it under your control. I would recommend you do this during the first days of the project. This means the product should be compiled, tested, packaged, installed, and deployed to a production repository (or server/s) by a single click. Some script should be created to automate this chain of operations. That's what your outsourcing partner has to create for you. Then, when development starts, every time a new change is made to the repository that has to be deployed to production, the same script has to be executed. What is important here is that you should know how this script works and how to run it. You should be able to build and deploy your product by yourself.
Demand Weekly Releases. Don't wait for the final version. Ask your outsourcing team to release a new version every week. No matter how intensive the development is and how many features are "in progress," it's always possible to package a new version and release it. If the development is really intensive, ask your team to use GitFlow or something similar to isolate a stable production branch from development branches. But don't wait! Make sure you see your software packaged and deployed every single week, no exceptions and no excuses. If your outsourcing team can't give that to you, start worrying and change something.
Hire an Independent CTO. This advice is mostly for small companies or individuals who outsource software development and rely on their expertise while staying focused on their own business development. That's unwise; you should have an independent chief technical officer (CTO) who reports to you and controls how the outsourcing team works. This person must be on a different payment schedule with different goals, terms, and objectives. You should talk to the CTO and the CTO should control the offshore team. Very often, business owners try to become software savvy and control the software team directly, learning their software jargon, principles of DevOps, and even Java syntax (I've seen that). This is a route to failure. Be smart—you do the business development, the CTO reports to you, and the software team reports to the CTO.
Define Rewards and Punishments. There is no management without these two key components. You're not supposed to manage all programmers in the outsourcing shop, but you have to manage the entire shop as a single unit of control. You have to give them some structure of motivation. They have to know what will happen to them if they succeed and how much they will suffer if they fail. If you don't make this mechanism explicit, you will deal with an implicit version of it where your chances of winning are very low. Most people assume the best and only motivation for a software team is to stay on the project. You're paying them and that's enough, right? Wrong. Management can't be effective when a monthly bank transfer is a reward and its absence is a punishment. It is too coarse-grained; that's why it's absolutely ineffective. Find a better and more fine-grained mechanism. This post may help: Why Monetary Awards Don't Work.