Managing Risk of IT Security Outsourcing in the Decision-Making Stage

With the promised benefits for outsourcing IT security services also come major risks. IT security outsourcing decisions possess major legal, organizational and contractual risks. Drawing on National Institute of Standards and Technology (NIST) publications as the principal source of information, supplemented by interviews with key security personnel, this research reviewed and extracted IT security risk elements which culminated in a flow-chart to aid decision-making with respect to IT security outsourcing.