A method of decision-making for outsourcing implementation in the field of information technologies in compliance with security requirements

The outsourcing decision should be based not only on evaluation of potential economic effect, but also on financial estimation of possible risks. Consequently, there is a need for a method of calculation of economic effect of IT outsourcing taking into account potential change of level of risks. The present paper contains a method of decision making in the field of IT-outsourcing. This method includes information security requirements and is based on the notion of full cost of information system. Full cost of information system includes not only cost of development and use, but also possible loss generated by its misuse. An algorithm of calculation of full cost of information system is proposed. Main situations in which IT outsourcing is effective from the point of view of economic security are described.