Information Security Risk Management in IT Outsourcing – A Quarter-century Systematic Literature Review

Baber Majid Bhatti, Sameera Mubarak and Sev Nagalingam

Journal of Global Information Technology Management, 2021, vol. 24, issue 4, 259-298

Abstract: Information Security Risk Management (ISRM) in Information Technology Outsourcing (ITO) is among the most critical and under-studied areas of ITO research. This study investigates the body of knowledge focusing on ISRM in ITO by conducting a systematic literature review (SLR) and analyzes 63 papers published between 1994 and 2020. The findings suggest that developing conceptual models or providing commentary is the most popular methodology. Most studies collect data from secondary sources instead of industry. A majority of the studies neither investigate any specific industry nor ITO orientation, i.e., client or service providers. Information security risks (ISRs) from the literature are categorized into 27 types. Most ISRs belong to operations practice, while lack of staff loyalty is the least investigated type of ISRs. Theories, frameworks and models discussed in the literature are explored. A critical analysis of the findings is conducted to identify the gaps and future directions. Since most of the literature is based on conceptual work, it is hard for practitioners to apply this knowledge in the industry unless validated by further research. Specialized literature from the perspectives of ITO orientation, industry type and demographics is required to investigate focused issues and develop accurate knowledge of ISRM in ITO.

Date: 2021
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/1097198X.2021.1993725 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:ugitxx:v:24:y:2021:i:4:p:259-298

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/ugit20

DOI: 10.1080/1097198X.2021.1993725

Access Statistics for this article

Journal of Global Information Technology Management is currently edited by Prashant Palvia

More articles in Journal of Global Information Technology Management from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().