Information security considerations in IS/IT outsourcing projects: a descriptive case study of two sectors

摘要

This paper presents an overview of a national case study exploring the information security considerations in the Information Systems/Information Technology (IS/IT) outsourcing projects in the public and private sectors of Kuwait where the data collection for this study was carried out. The primary data on IS/IT outsourcing practices, obtained for the first time in Kuwait, were collected by means of survey questionnaires and semi-structured interviews supported by organisational documentation. Several public and private sector organisations were selected to participate in the investigation. This study is descriptive in nature. Its main findings suggest that security concerns have been the most prominent risk factors and have overtaken the other risk issues (e.g. loss of control, hidden costs) which were thought to be the most serious in dealing with IS/IT outsourcing in the Kuwaiti environment. The causes of such concerns are also addressed. The findings also provide an insight into how outsourcing practices, as an information system strategy, are managed in the context of Kuwait.