As organizations pursue cost savings and operational efficiencies with their existing business processes, they often turn to service providers either in their home countries or abroad to reap additional cost savings associated with factors such as lower wages, lower operating costs and workers with experience that may not be available in-house. Alternatively, some organizations choose to move their operations to off-shore locations but retain control over their infrastructure, staff and processes. In either case, organizations need to manage the risks associated with safeguarding their assets and their information while complying with the various regulations and laws that govern their industry.
All business initiatives have an associated degree of risk. The risk associated with safeguarding the confidentiality, integrity and availability of information assets is a component of the overall business risk picture for all organizations worldwide. Ensuring that people, processes and technology are properly managed to address this risk is a challenge faced by information security professionals. There are, however, some unique risks associated with outsourcing that need to be addressed by various organizational stakeholders to avoid pitfalls. These risks include:













