The Governance Implications When it is Outsourced

Abstract

This chapter considers the governance issues raised by the increasing use of external parties to supply IT resources (including packaged enterprise software). The chapter briefly reviews existing formal governance frameworks and their treatment of IT outsourcing, then introduces an analytical model for considering outsourcing benefits and risks. The chapter then goes on to highlight some strategic IT governance issues that become critical once a firm outsources a significant proportion of its IT services. The aim of the chapter is to alert decision makers to the fact that outsourcing IT incorporates residual risks even when widely recommended operational controls are implemented. It concludes that effective control processes are necessary, but not sufficient for good corporate governance and suggests that those responsible for corporate governance ensure that both operational and strategic governance issues are considered when IT is substantially outsourced.