Depending on the outsourcing project in question, the employees of the outsourcing customer may need site, system, and data access rights for IT systems, information, buildings, or rooms of the outsourcing service provider. If these rights are poorly assigned, managed, and controlled by the outsourcing service provider, this can lead to far-reaching security problems. If the processes for granting rights are too complex, for example, it may take too long for the employees of the outsourcing customer to obtain urgently needed rights. On the other hand, if the IT Operation Department grants its clients too many rights, they might also access areas of other clients as a consequence.