Depending on the outsourcing project in question, an outsourcing service provider's employees may require site, system, and data access rights for IT systems, information, buildings, or rooms on the customer side. These rights may be inappropriately assigned, managed, and controlled, and in extreme cases may even result in rights being granted without authorisation. In addition, the necessary protection of the outsourcing customer's information can no longer be guaranteed. For example, it is a serious security risk to grant uncontrolled administrative authorisations to employees of an outsourcing service provider. These employees may exploit the authorisations and copy or manipulate sensitive information.