The introduction phase of outsourcing projects is frequently characterised by tight schedules and budgets. This can mean that security checks and audits are not carried out. Reviews and other quality assurance measures, such as the creation of a security concept, may also be skipped. Transitional safeguards with security shortcomings may become routine over the course of time and are then often maintained for many years due to resource bottlenecks. This comes with the risk that an overall project atmosphere could set in that will give rise to serious additional security shortcomings.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)