Enterprises that outsource without properly assessing the provider's security profile are at risk of losing their data, reputation, and customers. Protect the organization's interests by following best practice guidelines for gauging outsourcer security risks.

Outsourcers: A Growing Target

Enterprises outsource a variety of tasks for a variety of reasons. Typical IT services slated for outsourcing include application development, Web design, data center services, and help desk. Many of these functions are shipped overseas, where security oversight and governance are logistically difficult to monitor.

Also at risk are outsourcers that collect, dispense, or process personal data. These outsourcers are often targeted by hackers intent on stealing personal information for identity theft purposes. Potential candidates for hacking include:

• Financial accounting and banking services.
• Credit card transaction processors.
• Human resources providers.
• Application hosting services.
• Payroll companies.

The severity and frequency of threats continue to rise. A number of high-profile data thefts occurred in...