A framework for level of service delivery of outsourced IT projects: providers' perspective

Abstract

The growth of Information Technology (IT) outsourcing has been on upward trend since the 90’s and still taking place worldwide. The growth of outsourcing is mainly attributed to its supposed benefits; improve strategic focus and structural change, generally promoted by IT service provider press release or publications. Nevertheless, a particular attention to information security in outsourcing is necessary. Traditionally, only non-strategic systems have been outsourced. This is currently changing. Typically, information security methods have evolved from checklist-based methods to the risk analysis and evaluation criteria methods (Baskerville 1993, Backhouse and Dhillon, 1996). Current checklist-based approaches are adequate when outsourcing noncritical systems. However, when the importance of outsourced systems increases, more convincing provision of security of service providers is required.