Sourcing Information Security Operations: The Role of Risk Interdependency and Competitive Externality in Outsourcing Decisions

Firms are increasingly outsourcing information security operations to managed security service providers ( MSSP s). Cost reduction and quality (security) improvement are often mentioned as motives for outsourcing information security, and these are also the frequently cited reasons for outsourcing traditional information technology ( IT ) functions, such as software development and maintenance. In this study, we present a different...