Information security considerations in IS/IT outsourcing projects: A descriptive case study of two sectors

International Journal of Information Management

Volumn 24, Issue 1, 2004, Pages 29-42

  Khalfan, Abdulwahed Mo ^a  

^a UNIVERSITY OF LEEDS   (United Kingdom)

Author keywords

Information security; IT outsourcing; Private sector; Public sector

Indexed keywords

DECISION MAKING; INFORMATION TECHNOLOGY; OUTSOURCING; RISK ASSESSMENT; SECURITY OF DATA; TELECOMMUNICATION SERVICES;

IT OUTSOURCING; PRIVATE SECTOR; PUBLIC SECTOR;

INFORMATION MANAGEMENT;

EID: 1242265180     PISSN: 02684012     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijinfomgt.2003.12.001     Document Type: Article

References (56)

1. Avison, D.E. (1993). Research in information systems development and the discipline of IS. Proceedings of 14th of Australian conference on information systems, Brisbane.
2. Badri M. Critical issues in information systems management. An international perspective International Journal of Information Management. 12:1992;179-191.
3. Barthelemy J. The hidden costs of IT outsourcing. Sloan Management Review. 42(3):2001;60-69.
4. Benbasat I., Goldstein D., Mead M. The case research strategy in studies of information systems. MIS Quarterly. 11(3):1987;369-386.
5. Betts M. Hidden costs of IT outsourcing. Computerworld. 1(4):2001;33-34.
6. Bozeman B., Bretschneider S. Public management information systems. Theory and prescription (Special issue) Public Administration Review. 46:1986;475-487.
7. Bretschneider S. Management information systems in public and private organizations. An empirical test Public Administration Review. 50(5):1990;536-545.
8. Bretschneider S., Wittmer D. Organizational adoption of microcomputer technology. The role of sector Information Systems Research. 4(1):1993;88-108.
9. British Standard, Part 1 (1999). Information security management.
10. Buck-Lew M. To Outsource or Not? International Journal of Information Management. 12:1992;3-20.
11. Cavaye A. Case research. A multi-faceted research approach for IS Information Systems Journal. 6:1996;227-242.
12. Collins J., Millen R. Information systems outsourcing by large American industrial firms. Choices and impact Information Resources Management Journal. 8(1):1995;5-13.
13. Currie W. Outsourcing the new IT Strategy. Currie W. Management for IT: An international perspective. 1995;Pitman Publishing, London.
14. Currie W. Outsourcing in the private and public sectors. An unpredictable IT strategy European Journal of Information Systems. 4:1996;226-236.
15. De Looff L. Information systems outsourcing decision making. A framework, organisational theories and case studies Journal of Information Technology. 10:1995;281-297.
16. Diromualdo A., Gurbaxani V. Strategic intent for IT outsourcing. Sloan Management Review. 39(4):1998;67-80.
17. Dorsi, M. (1998). Worldwide trends in outsourcing information technology. Newsletter of U.S. General Service Administration. Office of Government Policy (Outsourcing Edition), Vol. 3, 2-4.
18. Eisenhardt K.M. Building theories from case study research. Academy of Management Review. 14(4):1989;532-550.
19. Fink D. A security framework for information systems outsourcing. Information Management & Computer Security. 2(4):1994;3-8.
20. Gable G. Integrating case study and survey research methods. An example in information systems European Journal of Information Systems. 3(2):1994;112-126.
21. Galliers R.D. Choosing information systems research approaches. Galliers R. Information systems research: issues, methods, and practical guidelines. 1992;Blackwell Scientific, Oxford.
22. Guba E.G. Critique for assessing the trustworthiness of natural inquires. ERIC/ECTJ Annual Review Paper. 29(2):1981;75-91.
23. Gupta U.G., Gupta A. Outsourcing the IS function. is it necessary for your organisation Information Systems Management. 14(2):1992;74-77.
24. Hendry J. Culture, Community, and the Networks. the Hidden Cost of Outsourcing European Management Journal. 13(2):1995;13-20.
25. Jack, G. (1992). Successful outsourcing depends on a successful contract. Corporate Controller, 4(5), 17-20.
26. Jankowicz, A. D. (1995). Business Research Projects. International Thomson Business Press.
27. Kaplan B., Duchon D. Combining qualitative and quantitative methods in information systems research. A case study MIS Quarterly. 12(4):1988;571-587.
28. Kiely T. The Wrong Goodbye. CIO. September 1:1992;34-43.
29. Lacity M., Hirschheim R. Information systems outsourcing myths, metaphors, and realities. 1993;Wiley, New York.
30. Lacity M., Hirschheim R. Beyond the information systems outsourcing bandwagon. The insourcing response. 1995;Wiley, New York.
31. Lacity M., Hirschheim R., Willcocks L. Realizing outsourcing expectations. Information Systems Management. 11:1994;7-18.
32. Lee, A. (1989). A scientific methodology for MIS case study. MIS Quarterly, 33-50.
33. Lee J., Kim Y. Information systems outsourcing for affiliated firms of the Korean conglomerate groups. Journal of Strategic Information Systems. 6:1997;203-229.
34. Lee, M. (1995). IT Outsourcing Contracts: Practical Issues for Management, Working Paper # 95/05. Information Systems Department, City University of Hong Kong.
35. Loh L., Venkatraman N. Diffusion of information technology outsourcing: Influence sources and kodak effect. Information Systems Research. 3(4):1992;334-358.
36. Loh, L., & Venkatraman, N. (1992b). Management. 29, 265-275.
37. McFarlan F.W., Nolan R.L. How to Manage an IT Outsourcing Alliance. Sloan Management Review. Winter:1995;9-23.
38. Mohan L., Holstein W.K., Adams R.B. EIS. It can work in the public sector MIS Quarterly. 14(4):1990;435-448.
39. Palvia S., Palvia P., Zigli R. Global information technology environment. Key MIS issues in advanced and less-developed nations Palvia S., Palvia P. Global issues of information technology management. 1992;2-34 Idea Publishing Group, London.
40. Perry J.L., Rainey H.G. The public-private distinction in organization theory. A critique and research strategy Academy of Management Review. 13(2):1988;182-201.
41. Peterson, B., Brown, M., & Maw, R. (2002). Information security in outsourcing agreements. http://www.outsourcing-journal.com/issues/mar2002/legal.html . Accessed in March 2002.
42. Radcliff D. Thinking ASP? Don't forget security! Computerworld. 34(44):2000;58.
43. Rainey H.G. Public Agencies and Private Firms. Administration and Society. 15(2):1983;207-243.
44. Rainey H.G. Regulated institutions. Journal of Government Information. 24(4):1983;267-283.
45. Robson C. Real world research. 1993;Blackwell, Oxford.
46. Shanks, G., Rouse, A., & Arnott, D. (1993). A review of approaches to research and scholarship in information systems. Proceedings of 14th of Australian Conference on Information Systems, Brisbane.
47. Sherwood J. Managing Security for Outsourcing Contracts. Computers & Security. 2:1997;603-609.
48. Slaughter, S., & Ang, S. (1996). Employment Outsourcing in Information Systems. Communications of the ACM, 39(7), July, 47-54.
49. Straub, D. (1989a). Validating instruments in MIS research, MIS quarterly, June, 147-166.
50. Straub, D. (1989b). the ACM, 39(7), 47-54.
51. Straub, D. (1989c). The USA Public Administration. Information Systems Journal, 7, 85-108.
52. Tye E., Chau P. A Study of Information Technology Adoption in Hong Kong. Journal of Information Science. 21(1):1995;11-19.
53. Vijayan J. Outsourcers rush to meet security demand. Computerworld. 35(9):2001;34.
54. Walsham G. Interpretive case studies in IS research. Nature and method European Journal of Information Systems. 4:1995;74-81.
55. Willcocks L., Currie W. Contracting out Information Technology in the public sector context. Research and critique Journal of the Australian and New Zealand Academy of Management. 2(2):1997;34-49.
56. Yin R.K. Case study research design and methods, (2nd ed.). 1994;Sage Publications, Newbury Park.