Business Process Outsourcing & Contact Centers Industry Acronyms

Business Process Outsourcing & Contact Centers Industry Acronyms

Recieve consulting resources in your inbox

This glossary explains operational, technology, workforce, commercial, quality, and regulatory acronyms used across Business Services / Professional Services, with a focused view of the Business Process Outsourcing & Contact Centers Practice. It helps executives, operators, advisors, clients, and suppliers interpret performance reports, contracts, platforms, compliance requirements, and transformation initiatives.

0–9 A B C D E F G H I K L M N O P Q R S T U V W X

0–9
10DLC 10-Digit Long Code:
A standard local telephone number used for application-originated business messaging in the United States. Registration and carrier approval affect message throughput, filtering, deliverability, and compliance.
A
A2P Application-to-Person:
Messaging sent from a business application to an individual, including service alerts, authentication codes, appointment reminders, and customer-support notifications.
ACD Automatic Call Distributor:
A contact-center system that receives inbound calls and routes them to suitable agents, queues, or automated services according to configured rules.
ACR Abandoned Call Rate:
The percentage of offered calls disconnected by customers before reaching an agent. It is monitored as an indicator of accessibility, queue performance, and staffing adequacy.
ACW After-Call Work:
Time an agent spends completing notes, classifications, dispositions, or follow-up tasks immediately after an interaction.
AHT Average Handle Time:
The average duration of a handled interaction, typically including talk or contact time, hold time, and after-contact work. It is central to capacity planning and productivity management but must be balanced against quality and resolution outcomes.
AI Artificial Intelligence:
Technologies that perform tasks such as intent detection, summarization, forecasting, quality evaluation, agent assistance, and automated customer service.
AMD Answering Machine Detection:
Dialing technology that attempts to distinguish a live person from voicemail or an answering machine, affecting outbound-agent productivity and customer experience.
ANI Automatic Number Identification:
Telecommunications data that identifies the telephone number associated with an incoming call. It supports customer lookup, routing, authentication, and reporting.
ART Average Response Time:
The average elapsed time before customers receive a response, particularly across email, messaging, chat, and social-service channels.
ASA Average Speed of Answer:
The average queue time before answered contacts reach an agent. It is commonly used to evaluate staffing performance and service accessibility.
ASR Automatic Speech Recognition:
Technology that converts spoken language into machine-readable text or commands for voice bots, transcription, analytics, and agent-assistance applications.
ATDS Automatic Telephone Dialing System:
A statutory term under United States telephone-consumer law that is relevant when assessing consent and restrictions for automated outbound calling and text messaging.
ATT Average Talk Time:
The average time agents spend actively conversing with customers, excluding most post-contact work and, depending on the reporting convention, hold time.
AUX Auxiliary Work:
An agent state used for breaks, coaching, meetings, training, administrative work, or other activities that make the agent unavailable for routed contacts.
B
BAA Business Associate Agreement:
A contract required in specified United States healthcare relationships that establishes how a service provider may use, safeguard, and disclose protected health information.
BAFO Best and Final Offer:
A supplier’s final commercial and contractual submission during a competitive sourcing process, generally following clarification and negotiation rounds.
BCM Business Continuity Management:
The governance discipline used to prepare for, respond to, and recover from operational disruptions affecting people, facilities, technology, telecommunications, or suppliers.
BCP Business Continuity Plan:
Documented procedures for maintaining or restoring critical services during events such as site outages, severe weather, cyber incidents, utility failures, or workforce disruptions.
BCR Binding Corporate Rules:
Internal data-protection policies approved by European supervisory authorities to support transfers of personal data among entities in a multinational corporate group.
BIA Business Impact Analysis:
A structured assessment of how service interruptions affect customers, contractual commitments, revenue, compliance, and operations. Its findings help set recovery priorities and continuity requirements.
BOT Build-Operate-Transfer:
An outsourcing model in which a provider establishes and operates a delivery capability before transferring ownership or control to the client.
BPA Business Process Automation:
The use of workflow, rules, integration, and automation technologies to execute repetitive process steps with less manual effort and greater consistency.
BPaaS Business Process as a Service:
A cloud-delivered model in which standardized business processes, enabling technology, and operational support are provided as a scalable service.
BPM Business Process Management:
A discipline for designing, governing, measuring, and continuously improving end-to-end processes across organizational and supplier boundaries.
BPMN Business Process Model and Notation:
A standardized graphical notation for documenting workflows, decisions, events, handoffs, and process participants during design or transformation work.
BPO Business Process Outsourcing:
The contracting of defined operational processes to an external provider, often covering customer operations, transaction processing, finance, analytics, or industry-specific services.
BPS Business Process Services:
A broad provider category encompassing outsourced operations, managed processes, analytics, automation, and process-transformation services.
BTO Business Transformation Outsourcing:
An outsourcing approach that combines service delivery with material redesign of processes, technology, organization, and performance outcomes.
BYOC Bring Your Own Carrier:
A cloud-contact-center arrangement that lets an organization retain or select its telecommunications carrier rather than using only the platform provider’s bundled connectivity.
C
CAI Conversational Artificial Intelligence:
Technology that interprets natural language and generates responses across voice or digital channels, enabling virtual agents, self-service, and real-time agent support.
CAN-SPAM Controlling the Assault of Non-Solicited Pornography and Marketing Act:
A United States law governing commercial email, including sender identification, truthful subject lines, opt-out mechanisms, and processing of unsubscribe requests.
CAPA Corrective and Preventive Action:
A quality-management process for correcting identified nonconformities, investigating root causes, and preventing occurrence or recurrence.
CASL Canada’s Anti-Spam Legislation:
Canadian requirements governing commercial electronic messages, consent, sender identification, unsubscribe functionality, and certain software-installation practices.
CCaaS Contact Center as a Service:
A cloud delivery model for routing, digital engagement, workforce management, analytics, quality management, and related customer-service capabilities.
CCPA California Consumer Privacy Act:
A California privacy law granting covered consumers rights concerning access, deletion, correction, disclosure, and certain uses or transfers of personal information.
CDR Call Detail Record:
A structured telecommunications record containing attributes such as originating number, destination, start time, duration, routing, and disposition for a call.
CES Customer Effort Score:
A survey-based measure of how easy or difficult customers found an interaction or task. It helps identify friction in service journeys and processes.
CFPB Consumer Financial Protection Bureau:
The United States federal agency responsible for consumer financial protection, with relevance to outsourced servicing, collections, complaints, disclosures, and fair-treatment controls.
CLI Calling Line Identification:
Telephone-network information that displays or transmits the calling party’s number, supporting identification, routing, callback, and fraud controls.
COE Center of Excellence:
A centralized team that establishes standards, expertise, governance, reusable methods, and improvement capabilities for a process or technology domain.
COPC Customer Operations Performance Center:
The name associated with a performance-management framework and certification standard used to improve customer-operations quality, efficiency, service, and customer experience.
CPaaS Communications Platform as a Service:
A cloud model that provides programmable voice, messaging, video, and verification capabilities for integration into customer-service workflows and applications.
CPC Cost per Contact:
The total operating cost divided by the number of handled contacts for a defined channel and period. It supports channel economics, benchmarking, pricing, and productivity analysis.
CPRA California Privacy Rights Act:
A California measure that expanded the state’s privacy regime, added consumer rights and obligations, and established a dedicated privacy enforcement agency.
CRM Customer Relationship Management:
A system and operating discipline for managing customer profiles, interaction histories, cases, opportunities, preferences, and service activities.
CRTC Canadian Radio-television and Telecommunications Commission:
Canada’s telecommunications regulator, with responsibilities relevant to unsolicited communications, telemarketing, telephone-number use, and carrier practices.
CSAT Customer Satisfaction:
A survey-based measure of customer satisfaction with a specific interaction, process, product, or overall relationship, usually reported as a score or favorable-response percentage.
CSP Communications Service Provider:
A company supplying voice, messaging, connectivity, numbering, or related communications services used by contact-center platforms and operations.
CSR Customer Service Representative:
An employee or contractor who handles customer inquiries, transactions, support requests, complaints, or other service interactions.
CTI Computer Telephony Integration:
The connection of telephone systems with business applications to enable screen pops, click-to-dial, call control, routing, recording, and interaction logging.
CTQ Critical to Quality:
A measurable product, process, or service characteristic that must meet defined requirements to satisfy customers or comply with operational standards.
CX Customer Experience:
The customer’s overall perception formed through interactions across channels, processes, products, employees, and service outcomes.
CXM Customer Experience Management:
The coordinated measurement and improvement of customer journeys, interactions, feedback, service design, and operational delivery.
D
DID Direct Inward Dialing:
A telephone service that assigns numbers capable of routing inbound calls directly to particular users, queues, applications, or services without operator intervention.
DLP Data Loss Prevention:
Policies and technologies designed to detect and restrict unauthorized transmission, copying, storage, or disclosure of sensitive data.
DMAIC Define, Measure, Analyze, Improve, Control:
A structured process-improvement method used to diagnose performance gaps, implement changes, and sustain measurable gains.
DNC Do Not Call:
A designation covering consumer opt-outs, internal suppression lists, and government registries that restrict specified outbound telemarketing calls.
DNIS Dialed Number Identification Service:
A telephone-network service that identifies which destination number a caller selected, enabling routing by brand, campaign, language, product, or service line.
DPA Data Processing Agreement:
A contract defining the parties’ responsibilities, instructions, safeguards, subprocessors, breach obligations, and data-handling requirements when personal information is processed.
DPDP Act Digital Personal Data Protection Act:
India’s personal-data law governing specified digital processing activities, including obligations affecting service providers and cross-border delivery operations.
DPIA Data Protection Impact Assessment:
A documented evaluation of privacy risks and safeguards for processing activities likely to create high risks to individuals’ rights and freedoms.
DR Disaster Recovery:
The capabilities and procedures used to restore technology, telecommunications, data, and critical applications after a serious disruption.
DSAR Data Subject Access Request:
A request from an individual seeking access to personal data and related processing information. Outsourced operations may need controlled procedures to identify, retrieve, review, and deliver responsive records.
DSAT Customer Dissatisfaction Score:
A measure of unfavorable customer responses following an interaction or journey, used to identify service failures and prioritize corrective action.
DTMF Dual-Tone Multi-Frequency:
The signaling technology behind telephone keypad tones, commonly used for menu selection, account entry, authentication, and payment input.
E
EWT Estimated Wait Time:
A forecast of how long a customer is likely to wait before service, often announced in a queue or used to trigger callback and routing options.
F
FAO Finance and Accounting Outsourcing:
The external delivery of processes such as transaction processing, reconciliations, reporting support, order-to-cash, procure-to-pay, and record-to-report.
FCC Federal Communications Commission:
The United States regulator responsible for interstate and international communications, including rules affecting calling, texting, numbering, caller identification, and accessibility.
FCR First Contact Resolution / First Call Resolution:
The percentage of customer issues resolved during the initial interaction without avoidable transfer, escalation, or repeat contact. The broader formulation covers all channels, while the call-specific formulation applies to voice interactions.
FCRA Fair Credit Reporting Act:
A United States law governing consumer-reporting information, with implications for outsourced collections, disputes, identity verification, account servicing, and permissible use of data.
FDCPA Fair Debt Collection Practices Act:
A United States law establishing conduct and communication requirements for covered third-party debt collectors, including restrictions relevant to collection contact centers.
FTC Federal Trade Commission:
The United States agency responsible for consumer-protection and competition enforcement, including telemarketing, deceptive practices, privacy, and information-security matters.
FTE Full-Time Equivalent:
A standardized unit representing the workload or capacity of one full-time worker. It is widely used for staffing plans, productivity comparisons, transfer baselines, and outsourcing prices.
G
GBS Global Business Services:
An enterprise operating model that integrates shared services, outsourcing, process ownership, technology, and governance across functions and geographies.
GCC Global Capability Center:
A company-owned delivery organization, often located in a talent hub, that provides operational, analytical, digital, or technology capabilities to the wider enterprise.
GDPR General Data Protection Regulation:
The European Union’s comprehensive data-protection regulation governing lawful processing, individual rights, security, accountability, processors, and international data transfers.
GenAI Generative Artificial Intelligence:
Technology that creates text, speech, summaries, answers, or other content from learned patterns. Common applications include agent assistance, interaction summarization, knowledge retrieval, and virtual service agents.
GLBA Gramm-Leach-Bliley Act:
A United States law containing privacy and safeguarding requirements for financial institutions and service providers handling consumers’ nonpublic personal information.
GOS Grade of Service:
A telecommunications measure of the probability that a call will be blocked or delayed beyond a defined threshold because capacity is unavailable.
H
HIPAA Health Insurance Portability and Accountability Act:
A United States law whose privacy, security, and breach-notification requirements affect healthcare service providers handling protected health information.
HITRUST CSF Health Information Trust Alliance Common Security Framework:
A certifiable risk and compliance framework that harmonizes security and privacy requirements and is frequently used to assess providers serving healthcare organizations.
I
ICMI International Customer Management Institute:
A professional organization providing training, research, certification, and operational guidance for contact-center and customer-management professionals.
ICO Information Commissioner’s Office:
The United Kingdom’s independent regulator for data protection and information rights, including privacy and electronic-communications requirements.
ID&V Identification and Verification:
Procedures used to establish a customer’s claimed identity and verify it before disclosing information, changing an account, or completing a sensitive transaction.
IDP Intelligent Document Processing:
The combined use of document capture, recognition, machine learning, and workflow to classify documents and extract data for downstream business processes.
IPA Intelligent Process Automation:
The coordinated use of automation, artificial intelligence, workflow, and analytics to execute and improve complex business processes.
ISAE 3402 International Standard on Assurance Engagements 3402:
An international assurance standard for reporting on controls at a service organization that are relevant to user entities’ financial reporting.
ISMS Information Security Management System:
A governed system of policies, risk assessments, controls, monitoring, and continual improvement for protecting information assets.
ISO 18295-1 International Organization for Standardization 18295-1 — Customer Contact Centres — Part 1: Requirements for Customer Contact Centres:
A standard specifying service, process, workforce, customer-protection, and performance requirements for customer-contact operations.
ISO 18295-2 International Organization for Standardization 18295-2 — Customer Contact Centres — Part 2: Requirements for Clients Using the Services of Customer Contact Centres:
A standard defining responsibilities and practices for organizations that engage internal or outsourced customer-contact services.
ISO 22301 International Organization for Standardization 22301 — Security and Resilience — Business Continuity Management Systems — Requirements:
A certifiable standard for establishing, operating, monitoring, and improving organizational resilience and continuity capabilities.
ISO 9001 International Organization for Standardization 9001 — Quality Management Systems — Requirements:
A certifiable standard focused on consistent processes, customer requirements, controlled documentation, performance evaluation, and continual improvement.
ISO/IEC 27001 International Organization for Standardization / International Electrotechnical Commission 27001 — Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements:
A certifiable standard for managing information-security risks through a structured control and governance system.
ITeS Information Technology-enabled Services:
Business services delivered with substantial reliance on telecommunications, software, workflow, data, and digital infrastructure, often from remote or offshore centers.
ITO Information Technology Outsourcing:
The external provision of infrastructure, application, service-desk, or technology operations. It is often sourced alongside business-process services but has different delivery skills, controls, and commercial units.
IVA Intelligent Virtual Assistant:
An automated voice or digital agent that uses language technologies, business rules, and integrations to answer questions or complete customer tasks.
IVR Interactive Voice Response:
An automated telephone system that collects spoken or keypad input to authenticate callers, provide self-service, or route calls.
K
KBA Knowledge-Based Authentication:
An identity-verification method that asks questions based on information expected to be known only by the legitimate customer.
KMS Knowledge Management System:
A platform for creating, approving, organizing, searching, and maintaining the procedures and answers used by agents and self-service tools.
KPO Knowledge Process Outsourcing:
The external delivery of specialized, judgment-intensive work such as research, analytics, engineering support, financial analysis, or domain-specific decision support.
KT Knowledge Transfer:
The structured capture and transfer of process, policy, system, exception-handling, and institutional knowledge during transition or workforce change.
KYC Know Your Customer:
Controls used to verify customer identity, understand risk, and satisfy financial-crime and regulatory requirements during onboarding and account servicing.
L
LCR Least-Cost Routing:
The automated selection of a telecommunications route based on cost and configured quality or availability criteria.
LGPD Lei Geral de Proteção de Dados Pessoais:
Brazil’s general personal-data protection law, establishing processing principles, individual rights, security duties, and obligations affecting service providers.
LLM Large Language Model:
A machine-learning model trained on large text collections to understand and generate language. Service applications include summarization, knowledge assistance, intent analysis, and conversational automation.
LOB Line of Business:
A product, customer, geographic, or operational segment used to organize routing, staffing, reporting, governance, and financial accountability.
LPO Legal Process Outsourcing:
The external delivery of defined legal-support processes such as document review, contract administration, legal research, or litigation support.
M
MBR Monthly Business Review:
A recurring governance meeting used to review service performance, financials, risks, staffing, improvement actions, and contractual commitments.
MFA Multi-Factor Authentication:
An access-control method requiring evidence from two or more authentication-factor categories, reducing the risk of unauthorized system or account access.
ML Machine Learning:
Computational methods that learn patterns from data for applications such as forecasting, routing, fraud detection, quality scoring, and language processing.
MMS Multimedia Messaging Service:
A mobile messaging standard that supports images, audio, video, and longer multimedia content in addition to text.
MNO Mobile Network Operator:
A carrier operating a mobile network and controlling subscriber connectivity, numbering, and message-delivery policies relevant to business communications.
MOS Mean Opinion Score:
A numerical rating of perceived voice or media quality, used to monitor whether network conditions support intelligible and reliable customer conversations.
MSA Master Services Agreement:
The principal contract establishing the legal and commercial terms governing an ongoing client-provider relationship and its subordinate work orders.
MSP Managed Service Provider:
A supplier that assumes continuing responsibility for operating, monitoring, and improving a defined service or capability under agreed performance requirements.
MTTR Mean Time to Resolution:
The average elapsed time required to resolve incidents or customer issues, often used in technical support and service operations.
N
NLP Natural Language Processing:
Technology that analyzes and generates human language for intent detection, sentiment analysis, classification, search, summarization, and automated conversations.
NLU Natural Language Understanding:
A branch of language technology focused on extracting meaning, entities, context, and user intent from spoken or written input.
NPS Net Promoter Score:
A relationship or journey metric calculated from customers’ likelihood-to-recommend ratings by subtracting the percentage of detractors from the percentage of promoters.
O
O2C Order-to-Cash:
The end-to-end process from customer order receipt through fulfillment, billing, receivables management, collections, and cash application.
OCR Optical Character Recognition:
Technology that converts printed, scanned, or photographed text into machine-readable data for document-intensive back-office workflows.
OLA Operational Level Agreement:
An internal agreement defining the responsibilities and performance commitments between teams that collectively support an external service obligation.
OTP One-Time Password:
A temporary authentication code delivered or generated for a single login or transaction, commonly used in customer verification workflows.
OTT Over-the-Top:
Internet-based communications delivered independently of traditional carrier voice or text services, including consumer messaging applications used for customer engagement.
P
P2P Procure-to-Pay:
The end-to-end process covering purchasing requests, supplier orders, receipt confirmation, invoice processing, approvals, and payment.
P4P Pay for Performance:
A commercial or compensation structure in which part of payment depends on achieving defined productivity, quality, sales, collection, or customer-outcome targets.
PBX Private Branch Exchange:
A private telephone system that manages internal extensions and external calling for an organization or contact-center site.
PCI DSS Payment Card Industry Data Security Standard:
A security standard for entities that store, process, or transmit payment-card account data, including service operations that accept card details by voice or digital channels.
PDCA Plan, Do, Check, Act:
An iterative management cycle used to test changes, evaluate results, standardize effective practices, and support continual improvement.
PDD Post-Dial Delay:
The elapsed time between initiating an outbound call and connecting the answered party to a live agent or automated message. Excessive delay can create silence and increase abandonment.
PECR Privacy and Electronic Communications Regulations:
United Kingdom rules covering electronic marketing, cookies, communications confidentiality, caller identification, and related privacy requirements.
PHI Protected Health Information:
Individually identifiable health information protected under United States healthcare privacy rules and requiring controlled access, use, storage, and disclosure.
PII Personally Identifiable Information:
Information that identifies, relates to, or can reasonably be linked with an individual, requiring appropriate privacy, access, retention, and security controls.
PIPEDA Personal Information Protection and Electronic Documents Act:
Canada’s federal private-sector privacy law governing the collection, use, disclosure, and safeguarding of personal information in covered commercial activities.
PIPL Personal Information Protection Law:
China’s national personal-information law, establishing processing obligations, individual rights, localization considerations, and cross-border transfer requirements.
POPIA Protection of Personal Information Act:
South Africa’s data-protection law governing lawful processing, security safeguards, data-subject rights, operators, and international transfers.
PSTN Public Switched Telephone Network:
The interconnected public telephone infrastructure used to originate and terminate conventional voice calls across fixed and mobile networks.
PTP Promise to Pay:
A debtor’s commitment to make a specified payment by an agreed date. Collection operations track kept and broken commitments as key outcome measures.
Q
QA Quality Assurance:
The systematic evaluation of interactions and processes against defined standards for accuracy, compliance, customer treatment, and procedural adherence.
QBR Quarterly Business Review:
A formal client-provider governance meeting focused on strategic performance, trends, financials, risks, transformation priorities, and forward plans.
QC Quality Control:
Inspection or testing activities used to detect errors and verify that completed transactions or service outputs meet defined requirements.
QM Quality Management:
The operating capability used to select, evaluate, calibrate, coach, and report on customer interactions and process outputs.
QMS Quality Management System:
A documented framework of policies, responsibilities, controls, records, audits, and improvement processes used to deliver consistent service quality.
R
R2R Record-to-Report:
The finance process covering accounting entries, reconciliations, close activities, consolidation, and preparation of management or statutory reporting.
RAG Retrieval-Augmented Generation:
An approach that retrieves relevant enterprise content and supplies it to a generative model when producing an answer. It can improve grounding and currency in agent-assistance and self-service applications.
RCA Root Cause Analysis:
A structured investigation used to identify the underlying causes of defects, complaints, repeat contacts, incidents, or performance failures rather than addressing only symptoms.
RCS Rich Communication Services:
A mobile messaging protocol supporting richer business interactions such as branding, media, suggested actions, delivery indicators, and conversational features.
RDA Robotic Desktop Automation:
Agent-attended automation that performs repetitive desktop tasks, retrieves information, or guides workflow while a human handles the interaction.
RFI Request for Information:
A sourcing document used to gather market intelligence, supplier capabilities, delivery options, and preliminary commercial information before a formal procurement.
RFP Request for Proposal:
A formal solicitation asking prospective providers to submit delivery, transition, technology, governance, risk, and pricing proposals against defined requirements.
RPA Robotic Process Automation:
Software automation that executes rules-based tasks through application interfaces or user-interface actions, often reducing manual processing in high-volume workflows.
RPC Right-Party Contact:
A verified interaction with the intended account holder or authorized person. It is a critical effectiveness and compliance measure in collection operations.
RPO Recovery Point Objective:
The maximum tolerable amount of data loss expressed as time, which determines backup, replication, and restoration requirements.
RTA Real-Time Adherence:
A workforce-management measure comparing agents’ current activities with their scheduled activities, enabling rapid response to coverage gaps.
RTA Real-Time Analyst:
A workforce-management role responsible for monitoring queues, staffing, agent states, schedule adherence, and intraday corrective actions.
RTO Recovery Time Objective:
The target maximum time for restoring a service or process after disruption, used to design continuity and recovery capabilities.
RTT Round-Trip Time:
The time required for a data packet or signal to travel to a destination and back. High latency can impair voice quality, screen response, and remote-agent performance.
S
SBR Skills-Based Routing:
The assignment of contacts to agents based on language, product, certification, proficiency, channel, customer value, or other defined capabilities.
SCC Standard Contractual Clauses:
European Commission-approved contract terms used as a safeguard for certain transfers of personal data to countries outside the European Economic Area.
SIP Session Initiation Protocol:
A signaling protocol used to establish, modify, and terminate voice, video, and other real-time communications over internet-based networks.
SL Service Level:
A contact-center measure reporting the percentage of offered contacts answered within a specified time threshold, such as 80 percent within 20 seconds.
SLA Service-Level Agreement:
A contractual commitment defining performance measures, targets, responsibilities, reporting, remedies, exclusions, and escalation procedures for a service.
SME Subject Matter Expert:
A practitioner with deep knowledge of a process, policy, system, product, or customer segment who supports operations, training, quality, and issue resolution.
SMS Short Message Service:
The mobile-network standard used for text messaging, including customer notifications, authentication, support conversations, and outbound campaigns.
SOC 1 System and Organization Controls 1:
An independent assurance report on service-organization controls relevant to user entities’ internal control over financial reporting.
SOC 2 System and Organization Controls 2:
An independent assurance report evaluating controls against applicable trust-services criteria such as security, availability, processing integrity, confidentiality, and privacy.
SOP Standard Operating Procedure:
A controlled document specifying how agents or processors must perform a recurring task, including required steps, decisions, controls, and escalation paths.
SOW Statement of Work:
A contract document defining service scope, deliverables, locations, volumes, responsibilities, assumptions, pricing, performance measures, and change procedures.
SSAE 18 Statement on Standards for Attestation Engagements No. 18:
A United States attestation standard governing examinations of controls at service organizations, including reports relevant to clients’ financial reporting.
SSC Shared Services Center:
A centralized internal unit that consolidates standardized support or transaction-processing activities for multiple business units or geographies.
STIR/SHAKEN Secure Telephone Identity Revisited / Signature-based Handling of Asserted Information Using toKENs:
A caller-identity authentication framework used to reduce spoofed calls and communicate whether originating providers have verified calling-number information.
STP Straight-Through Processing:
End-to-end transaction processing completed without manual intervention, often used as a target measure for automation and exception reduction.
STT Speech-to-Text:
Technology that converts spoken audio into written text for transcription, search, analytics, quality monitoring, and agent-assistance applications.
T
TAT Turnaround Time:
The elapsed time from receipt of a work item or request to completion, commonly used for back-office transactions, cases, escalations, and correspondence.
TCO Total Cost of Ownership:
The full lifecycle cost of a service or operating model, including transition, labor, technology, telecommunications, governance, retained organization, risk, and exit costs.
TCPA Telephone Consumer Protection Act:
A United States law regulating specified calls and text messages, including consent, revocation, automated technologies, prerecorded messages, and calling-time restrictions.
TDM Time-Division Multiplexing:
A telecommunications method that carries multiple voice or data streams by assigning each stream recurring time slots on a shared connection.
TFN Toll-Free Number:
A telephone number that generally charges the receiving business rather than the caller and is widely used for customer-service access and business messaging.
TOM Target Operating Model:
A defined future-state design covering organization, locations, processes, technology, governance, controls, sourcing, skills, and performance management.
TPRM Third-Party Risk Management:
The lifecycle process for assessing, contracting, monitoring, and exiting suppliers based on operational, financial, security, privacy, compliance, concentration, and resilience risks.
TPS Telephone Preference Service:
The United Kingdom’s official register through which individuals and certain organizations can opt out of unsolicited live sales and marketing calls.
TRAI Telecom Regulatory Authority of India:
India’s telecommunications regulator, with rules and programs affecting commercial communications, customer preferences, numbering, carriers, and service quality.
TSA Transition Services Agreement:
A contract under which one party temporarily provides services, systems, facilities, data, or personnel to support an operational separation or migration.
TSR Technical Support Representative:
An agent who diagnoses and resolves customer problems involving products, applications, devices, connectivity, or services.
TSR Telemarketing Sales Rule:
A United States federal rule governing covered outbound and inbound telemarketing practices, including disclosures, calling restrictions, payment methods, and deceptive conduct.
TTR Time to Resolution:
The elapsed time from issue creation or first contact until final resolution, used to evaluate case flow, escalation, and customer-impact duration.
TTS Text-to-Speech:
Technology that converts written text into synthesized speech for automated telephone services, virtual agents, accessibility, and dynamic announcements.
TUPE Transfer of Undertakings (Protection of Employment):
United Kingdom employment regulations that may protect employees and transfer employment obligations when services move between organizations or providers.
U
UC Unified Communications:
The integration of enterprise voice, video, messaging, presence, conferencing, and collaboration capabilities into a coordinated environment.
UCaaS Unified Communications as a Service:
A cloud model delivering enterprise calling, conferencing, messaging, presence, and collaboration capabilities on a subscription basis.
UK GDPR United Kingdom General Data Protection Regulation:
The United Kingdom’s retained and amended data-protection framework governing personal-data processing, processors, individual rights, security, and international transfers.
V
VDI Virtual Desktop Infrastructure:
Technology that hosts controlled desktop environments centrally and presents them remotely to agents, helping standardize access and protect client applications and data.
VDN Vector Directory Number:
A virtual contact-routing number used in certain telephony environments to direct calls into configured vectors, queues, and treatment logic.
VOC Voice of the Customer:
A structured program for collecting, analyzing, and acting on customer feedback from surveys, complaints, interactions, behavior, and journey data.
VoIP Voice over Internet Protocol:
The transmission of voice communications over internet-protocol networks rather than traditional circuit-switched telephone infrastructure.
VPN Virtual Private Network:
An encrypted connection that enables remote agents or sites to access authorized corporate systems through an untrusted network.
VRU Voice Response Unit:
An automated telephone component that plays prompts, accepts speech or keypad input, and provides information or routing without a live agent.
W
WAH Work-at-Home:
A delivery model in which agents or processors work remotely from approved home environments using defined connectivity, security, supervision, and workspace controls.
WBR Weekly Business Review:
A recurring operational governance meeting focused on short-term performance, staffing, incidents, forecasts, corrective actions, and emerging risks.
WebRTC Web Real-Time Communication:
Browser-based technology enabling real-time voice, video, and data communications without requiring traditional telephone endpoints or proprietary plug-ins.
WEM Workforce Engagement Management:
A suite of capabilities combining workforce planning, quality, coaching, performance, learning, and employee-engagement tools for customer operations.
WFM Workforce Management:
The forecasting, staffing, scheduling, intraday management, and adherence processes used to align labor capacity with contact demand.
WFO Workforce Optimization:
An integrated approach combining workforce planning, recording, quality management, analytics, performance management, and coaching.
WISMO Where Is My Order:
A common retail and e-commerce contact reason concerning shipment status, delivery timing, or tracking. Reducing these inquiries through proactive communication and self-service can lower avoidable demand.
X
XLA Experience-Level Agreement:
A client-provider commitment focused on user or customer experience outcomes rather than only operational activity measures and technical service targets.