Taxonomy of technological IT outsourcing risks: Support for risk identification and quantification

19th European Conference on Information Systems, ECIS 2011

Volumn , Issue , 2011, Pages

  Ackermann, Tobias ^a   Miede, André ^a   Buxmann, Peter ^a   Steinmetz, Ralf ^a  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

IT outsourcing; IT risk management; IT security; Literature review; Quality of service; Risks; Taxonomy

Indexed keywords

DOMINANT FACTOR; ECONOMIC BENEFITS; IT OUTSOURCING; IT SECURITY; LITERATURE REVIEWS; MATHEMATICAL RISKS; PERCEIVED RISK; RISK CATEGORIES; RISK IDENTIFICATION; RISK ITEMS; RISK MANAGEMENT PROCESS; SERVICE CHARACTERISTICS; SOFTWARE-AS-A-SERVICE; SUCCESSIVE REFINEMENT; TECHNOLOGICAL RISK;

DATA PRIVACY; INFORMATION SYSTEMS; OUTSOURCING; QUALITY OF SERVICE; RISK MANAGEMENT; SECURITY SYSTEMS; TAXONOMIES;

RISKS;

EID: 84870652288     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Amoroso, E. G. (1994). Fundamentals of Computer Security Technology. Prentice-Hall, Englewood Cliffs, NJ, USA.
2. Avižienis, A.; Laprie, J.-C; Randell, B. and Landwehr C. (2004). Basic Concepts and Taxonomy of Dependable and Secure Computing. In IEEE Transactions on Dependable and Secure Computing, 1 (1), 11-33.
3. Benlian, A. and Hess, T. (2010). The Risks of Sourcing Software as a Service: An Empirical Analysis of Adopters and Non-Adopters. In Proceedings of the 18th European Conference on Information Systems (ECIS), Pretoria (South Africa).
4. Butler, L. (2009). Privacy and Security: Usable Security: How to Get It. In Communications of the ACM, 52 (11), 25-27.
5. Carr, M. J.; Konda, S. L.; Monarch, I.; Ulrich, F. C. and Walker, C. F. (1993). Taxonomy-Based Risk Identification. Technical Report CMU/SEI-93-TR-6, Carnegie Mellon University.
6. Cooper, H.; Hedges, L. V. and Valentine, J. C. (2009). The Handbook of Research Synthesis and Meta-Analysis. 2nd Edition. Russell Sage Foundation, New York, NY, USA.
7. Dibbern, J.; Goles, T.; Hirschheim, R. and Jayatilaka, B. (2004). Information Systems Outsourcing: A Survey and Analysis of the Literature, In The Data Base for Advances in Information Systems, 35 (4), 6-102.
8. Earl, M. (1996). The Risks of Outsourcing IT, Sloan Management Review, 37 (3), 26-32.
9. Faisst, U. and Prokein, O. (2005) An Optimization Model for the Management of Security Risks in Banking Companies. In Proceedings of the Seventh IEEE International Conference on ECommerce Technology (CEC), 266-273.
10. Gouscos, D.; Kalikakis, M. and Georgiadis, P. (2003). An Approach to Modeling Web Service QoS and Provision Price. In Proceedings of the Fourth International Conference on Web Information Systems Engineering Workshops (WISEW), 121-130.
11. Hahn, E. D.; Doh, J. and Bunyaratavej, K. (2009). The Evolution of Risk in Information Systems Offshoring: The Impact of Home Country Risk, Firm Learning, and Competitive Dynamics. In MIS Quarterly, 33 (3), 597-616.
12. Howard, J.D. and Longstaff, T. A. (1998). A Common Language for Computer Security Incidents. Technical Report SAND98-8667, Sandia National Laboratories.
13. Lacity, M. C.; Khan, S. A. and Willcocks, L. P. (2009). A Review of the IT outsourcing Literature: Insights for Practice, The Journal of Strategic Information Systems, 18 (3), 130-146.
14. Levy, Y. and Ellis, T. J. (2006) A Systems Approach to Conduct an Effective Literature Review in Support of Information Systems Research. In Informing Science Journal, 9, 181-212.
15. Ma Q.; Pearson, J.M. and Tadisin S. (2005). An Exploratory Study into Factors of Service Quality for Application Service Providers; Information & Management 42, 1067-1080.
16. Miede, A.; Nedyalkov, N.; Gottron, C.; König, A.; Repp, N. and Steinmetz, R. (2010). A Generic Metamodel for IT Security: Attack Modeling for Distributed Systems. In Proceedings of the Fifth International Conference on Availability, Reliability, and Security (ARES 2010), 430-437.
17. Nahm, A.; Solís-Galván, L. E.; Rao, S. S. and Ragu-Nathan, T. S. (2002). The Q-Sort Method: Assessing Reliability and Construct Validity of Questionnaire Items at a Pre-Testing Stage. In Journal of Modern Applied Statistical Methods, 1 (1), 114-125.
18. Schmitt, J. B. (2000). Heterogeneous Network Quality of Service Systems. Kluwer Academic Publishers, Norwell, MA, USA.
19. Schneier, B. (2004). Secrets and Lies: Digital Security in a Networked World. Wiley, Indianapolis, IN, USA.
20. Sommerville, I. (2006). Software Engineering. 8th edition. Addison-Wesley, Boston, MA, USA.
21. Tchankova, L. (2002). Risk Identification: Basic Stage in Risk Management. In Environmental Management and Health 13 (3), 290-297.
22. vom Brocke, J.; Simons, A.; Niehaves, B.; Riemer, K.; Plattfaut, R. and Cleven, A. (2009). Reconstructing the Giant: On the Importance of Rigour in Documenting the Literature Search Process. In Proceedings of the 17th European Conference on Information Systems (ECIS), Verona (Italy).
23. Weinhardt, C.; Anandasivam, A.; Blau, B.; Borissov, N.; Meinl, T.; Michalk, W. and Stößer, J. (2009). Cloud Computing: A Classification, Business Models, and Research Directions. Business & Information Systems Engineering, 5 (1), 391-399.