Managing Security Service Providers: Issues in Outsourcing Security

The issue of trust and risk in outsourced relationships was extended beyond traditional outsourcing models with the introduction of Application Service Providers (ASPs). As ASPs evolve, Managed Security Service Providers (MSSPs) have emerged as external providers of security for firms facing increasing information assurance threats. This research-in-progress paper develops a conceptual model of MSSP adoption; it investigates variables that affect the adoption and management of the relationship (trust, risk, reputation and relationships with vendors)