Assessing the Risk of IT Outsourcing

Abstract

Ce texte porte sur l'évaluation du risque d'impartition des services informatiques. Le risque est défini ici comme étant fonction d'événements indésirables pouvant résulter d'une décision d'impartir, et des facteurs pouvant mener à ces événements indésirables. La théorie des coûts de transaction et la théorie de l'agence servent de base théorique à l'identification des principaux facteurs de risque. Les événements indésirables sont identifiés à partir d'une recension des écrits sur l'impartition des services informatiques.

Outsourcing decisions, and contractual arrangements of the type required by an IT outsourcing deal, entail risks. This is not to say that outsourcing is bad in itself. It only means that, as in other risky business ventures such as new product development, capital investments, and IS projects, risk assessment and risk management are important contributors to the success of an IT outsourcing venture. This paper focuses on risk assessment. After providing a brief conceptual definition of risk, the paper reviews the empirical literature in order to identify the0501n undesirable outcomes that may result from an IT outsourcing deal. It then uses transaction cost and agency theory as a primary theoretical basis, and proposes a framework for categorizing risk factors which have been identified in the literature. Finally, the paper discusses the dynamics of risk, by examining how the various risk factors are linked to the undesirable outcomes