Your firm has a 10- or 15-year relationship with one of the major Indian IT services providers. They run your core systems. They know where the bodies are buried. Your MSA was last renegotiated in 2019.
Here's what's happening that your vendor risk management program isn't tracking: the provider's business model is breaking in real time.
The Structural Shift
The margin engine that built these firms was labor arbitrage — thousands of developers at $25–40 per hour, deployed against maintenance, support, and application development work that Western firms couldn't staff economically. That arbitrage is compressing.
India's tech sector shed over 100,000 jobs in 2025, surpassing all of 2024 by mid-July. The major offshore providers led the restructuring.
TCS announced 12,000 mid- and senior-level cuts — employees in their late 40s and 50s, many with 15 or more years of tenure. The pattern is consistent across the sector. Workforce reductions are concentrated in the experienced ranks. These are the people who understood your environment before your current IT leadership arrived.
Operating margins at TCS have eroded nearly 400 basis points from their 2017 peak — from 29% to roughly 25%. Wipro has dropped 300 basis points from pre-COVID levels. Analysts report providers offering 20–30% price cuts just to retain renewals. The pricing pressure is relentless. Workforce cuts are the primary lever to defend what remains of the margin structure.
Foreign investors have noticed. They pulled a record $8.5 billion out of Indian IT stocks in 2025. The Nifty IT index dropped 20% in a single month earlier this year — the steepest decline since 2008. Jefferies downgraded most large Indian IT firms to hold or underperform. Price targets were cut by up to 33%.
The verdict from the market is plain: labor arbitrage is being replaced by technology arbitrage, and these firms are on the wrong side of the transition.
Three Survival Moves — All of Which Affect Your Account
The providers know what's happening. They're responding with three simultaneous survival moves, each of which creates risk for their clients.
Workforce restructuring
The cuts aren't random. They're concentrated in mid- and senior-level roles — the people with tenure, with context, with knowledge of legacy integrations and undocumented dependencies. When your provider announces "workforce optimization" or "AI-augmented delivery," they're telling you institutional knowledge is walking out the door. Nobody's tracking which of that knowledge applies to your systems.
Upstream pivot
The providers are trying to reposition from staff-augmentation shops to AI transformation partners. TCS claims $1.5 billion in annualized AI revenue and has stated its aspiration to become "the world's largest AI-led technology services company." Wipro has appointed a CEO for a new AI-native business unit. They're bidding on strategy and transformation work where they have less track record, with methodologies they're building in real time. The competition is Accenture and Deloitte — firms that are also adapting, but with deeper consulting benches and longer client relationships at the C-suite level.
Accenture invested in Replit, the AI coding platform, in April 2026, positioning explicitly for what they call "vibe coding" — natural language to working application. Deloitte has committed $3 billion to AI through 2030 and is restructuring its job architecture around AI-native delivery. The upstream space is getting crowded. Your offshore provider is arriving late.
Margin defense
Accounts that aren't central to the AI pivot get deprioritized. You won't receive a memo. You'll see slower response times, B-team assignments, and the quiet departure of the people who knew your environment. Non-strategic accounts subsidize the transformation. If your account is stable, profitable, and not demanding AI services, you may be funding their pivot. The attention you receive declines while their transformation accelerates.
The Gaps That Matter
The external factors — pricing pressure, margin erosion, workforce cuts, strategic pivot — create the conditions. The gaps are where those conditions hit your firm.
Competitive dynamics at your account
Is your provider losing work to competitors elsewhere in your organization? Have they lost a major renewal? Is your account central to their repositioning, or are you legacy maintenance? Deprioritization happens quietly. By the time you notice degraded service, the institutional knowledge is already gone.
Internal capability erosion
How much of your core technology stack is understood only by people who work for them — not for you? When they cut 12,000 mid- and senior-level roles, do you know which of those understood your payment processing integration, your legacy data warehouse, your custom middleware? The knowledge doesn't transfer to a successor. It doesn't get documented. It walks out the door. Your internal teams don't have it either.
MSA terms you may not have read since 2019
Transition assistance clauses. Knowledge transfer obligations. SLA commitments. Termination provisions. What happens if they announce "strategic realignment" and your account team gets reshuffled in 90 days instead of 12 months? Your MSA probably assumes an orderly handoff. You may not get one.
The CRO Question
Here's the question most CROs cannot answer:
The vendor risk scorecard is green. The contract is current. The SLAs are being met. And the structural risk is invisible — because the framework doesn't have a category for "my vendor's business model is under stress."
What This Risk Looks Like When You See It Early
Conventional vendor risk management scores providers on financial health, security posture, and SLA performance. Those indicators lag. By the time they turn red, the damage is done.
The leading indicators are in plain sight — but most risk teams aren't reading them. Provider earnings calls. Investor presentations. Workforce announcements. Analyst downgrades. These are public signals that tell you exactly what's happening: margin pressure, workforce restructuring, strategic repositioning that may or may not include your account.
The risk function that catches this early isn't the one with the most comprehensive vendor scorecard. It's the one paying attention to what's emerging — the capacity to see what's coming into being before it fits the framework.