Outsourced strategic IT systems development risk

Organizations are increasingly outsourcing the development of strategic IT systems to external vendors. Because of the importance of such systems to a client organization, unaddressed risks that develop into serious problems may have a huge negative impact on the organization. There is much reported research on IT development and IT outsourcing risk, and risk management. However, research on risk in outsourced strategic IT system development, from the client perspective, have largely been ignored. We developed a risk framework for outsourced strategic IT development based on the literature. In this paper we review three reported cases of unsuccessful strategic IT system development that provide an initial validation of our outsourced risk framework. A number of risks critical to a client are identified. These risks fall into several categories associated with organizational environment, team, user, complexity, contract, requirements, planning and control, and execution. If critical outsourcing risks are clearly understood by a client organization then strategies for managing such risks can be implemented.

[1]  A.L. Gilbert,et al.  Containing strategic information systems risk: control and intelligence , 1988, [1988] Proceedings of the Twenty-First Annual Hawaii International Conference on System Sciences. Volume III: Decision Support and Knowledge Based Systems Track.

[2]  Judy E. Scott The FoxMeyer Drugs' Bankruptcy: Was it a Failure of ERP? , 1999 .

[3]  Kalle Lyytinen,et al.  Attention Shaping and Software Risk - A Categorical Analysis of Four Classical Risk Management Approaches , 1998, Inf. Syst. Res..

[4]  H. Raghav Rao,et al.  Information systems outsourcing , 1996, CACM.

[5]  Peter Weill,et al.  IT Savvy Pays Off: How Top Performers Match IT Portfolios andOrganizational Practices , 2005 .

[6]  Mark Keil,et al.  Software project risks and their effect on outcomes , 2004, CACM.

[7]  S. Rivard,et al.  Série Scientifique Scientific Series Managing It Outsourcing Risk: Lessons Learned Managing It Outsourcing Risk: Lessons Learned , 2022 .

[8]  Suzanne Rivard,et al.  A framework for information technology outsourcing risk management , 2005, DATB.

[9]  Christian Duffin,et al.  Broken promises. , 2001, Nursing standard (Royal College of Nursing (Great Britain) : 1987).

[10]  John D. Felton Outsourcing Information Technology , 2008 .

[11]  R. Klepper,et al.  Outsourcing information technology, systems and services , 1998 .

[12]  Ralph Kliem,et al.  Managing the Risks of Offshore it Development Projects , 2004, Inf. Syst. Manag..

[13]  Robert N. Charette,et al.  Software Engineering Risk Analysis and Management , 1989 .

[14]  Suzanne Rivard,et al.  Assessing the risk of IT outsourcing , 1998, Proceedings of the Thirty-First Hawaii International Conference on System Sciences.

[15]  Leslie P. Willcocks,et al.  IT outsourcing in insurance services: risk, creative contracting and business advantage , 1999, Inf. Syst. J..

[16]  Vijay Gurbaxani,et al.  The new world of information technology outsourcing , 1996, CACM.

[17]  Lili Marziana Abdullah,et al.  Risk framework for outsourced strategic IT system development from the client perspective , 2008 .

[18]  Heather A. Smith,et al.  IT outsourcing risk management at British Petroleum , 2001, Proceedings of the 34th Annual Hawaii International Conference on System Sciences.

[19]  Tony Moynihan,et al.  An inventory of personal constructs for information systems project risk researchers , 1996, J. Inf. Technol..

[20]  Kalle Lyytinen,et al.  Identifying Software Project Risks: An International Delphi Study , 2001, J. Manag. Inf. Syst..

[21]  Effy Oz,et al.  When professional standards are lax: the CONFIRM failure and its lessons , 1994, CACM.

[22]  Suzanne Rivard,et al.  Toward an Assessment of Software Development Risk , 1993, J. Manag. Inf. Syst..

[23]  Eric K. Clemons,et al.  Strategic Information Technology Investments: Guidelines for Decision Making , 1990, J. Manag. Inf. Syst..

[24]  Mark Keil,et al.  Understanding software project risk: a cluster analysis , 2004, Inf. Manag..

[25]  R. Hämäläinen,et al.  Hawaii International Conference on System Sciences , 2004 .

[26]  B. Bahli,et al.  Validating measures of information technology outsourcing risk factors , 2005 .

[27]  Eric K. Clemons,et al.  Evaluation of strategic investments in information technology , 1991, CACM.

[28]  Suzanne Rivard,et al.  Managing the Risk of IT Outsourcing , 1999, HICSS.

[29]  Mohammed H. A. Tafti,et al.  Risks factors associated with offshore IT outsourcing , 2005, Ind. Manag. Data Syst..

[30]  F. W. McFarlan,et al.  Portfolio approach to information systems , 1989 .

[31]  Jaak Jurison The role of risk and return in information technology outsourcing decisions , 1995, J. Inf. Technol..