Outsourced Information Technology Environment Audit

by Navaratnasingam Arunanthy
Sept. 1, 2017 0 comments SANS Institute Pen Testing & Audits auditing & assessment

Outsourcing was hyped in the mid 90’s as one way to reduce IT cost, as well as to gain expertise for better business operations. Today some or many of the information technology activities in many organizations are outsourced. “IT outsourcing occurs when an organization contracts a service provider to perform an IT function instead of performing the function itself. The service provider could be a third party or another division or subsidiary of a single corporate entity. Increasingly, organizations are looking offshore for the means to minimize IT service costs and related taxes.”(CICA, 2003) Outsourced environments are complex and highly integrated with organizations and operations. As complexity increases managing relationships with service providers becomes challenging. “A survey performed by the IT Governance Institute indicates that problems with outsourcers increased on year 2007 from 74 Compound Problem Index (CPI) on year 2005 to 127 CPI. The CPI is the result of multiplyin...

https://www.sans.org/reading-room/whitepapers/auditing/outsourced-information-technology-environm...