Inadequate contractual arrangements sometimes result in an outsourcing service provider failing to provide the service required to maintain an outsourcing customer’s level of security. However, if the outsourcing service provider is not sufficiently informed about the protection needs and security requirements of outsourced data or systems, it cannot adequately protect them.