A Comparison of the Risks in Information TechnologyOutsourcing and Business Process Outsourcing

摘要

While the issue of risk in information technology outsourcing (ITO) is addressed by numerous authors, the risks of businessprocess outsourcing (BPO) are essentially unexplored. The authors propose that the risk structure of ITO is differentcompared to the one in BPO, the latter therefore requiring additional research. To challenge this proposition the major risksof ITO have been derived from literature and were assessed whether they apply differently to BPO engagements. Theassessment has been conducted via structured interviews with senior business and risk mangers of BPO service providers andBPO customers.Our findings indicate that, although the individual risk types are generally the same, they differ significantly in tendency.Fifteen individual risks were analyzed and the findings were that in BPO compared to ITO, two risks are classified to have atendency to be lower and eleven risks are classified to have a tendency to be higher. Only two risks were seen to generally bethe same in BPO as with ITO. Additionally, a risk type has been identified which was not formerly reported in outsourcing,namely the misuse of trust regarding sensitive data.