For Security & Risk Professionals

Primary Analyst Photo	Document Information	Rate this Document
May 16, 2008 Security And Privacy Essentials For IT Outsourcing Deals Managing Risk While Ceding Operational Control by Jennifer Albornoz Mulligan, Khalid Kark with Jonathan Penn, Christine Ferrusi Ross, Alissa Dill, Allison Herald	Average: 10  (1 rating)

This is an excerpt

Executive Summary

Global spending on IT services and outsourcing was estimated at $488 billion in 2007 and is predicted to rise an additional 9% in 2008. At $120 billion, IT outsourcing constitutes roughly 25% of this spending. Organizations engaged in outsourcing will require sufficient security and privacy controls to protect their investments and reduce risks to their sensitive information. Security and privacy professionals should be an integral part of the outsourcing process, from developing the request for proposal (RFP) to signing the contract. But the job isn't complete just because the contract has been signed; the outsourcing relationship needs to be monitored, the contract components need to be enforced, and business value needs to be realized.

TABLE OF CONTENTS

• Increased Outsourcing Carries Greater Security And Privacy Risk
• Bake Security And Privacy Into Outsourcing Relationships From The Start
• How To Ensure Your Outsourcing Deal Includes The Appropriate Security
• Regularly Monitor And Enforce Security And Privacy Contract Provisions

RECOMMENDATIONS

• How To Fund And Optimize Security And Privacy Investments In Outsourcing

WHAT IT MEANS

• Address Security And Privacy Risks When Seeking Savings From Outsourcing
• Supplemental Material
• Related Research Documents

This is an excerpt