Unsatisfactory contractual arrangements with outsourcing service providers may result in a variety of severe security issues. This applies in particular to creating, implementing, and maintaining applications. If tasks, performance parameters, or the effort involved are insufficiently or misleadingly described, security safeguards may not be implemented due to ignorance or a lack of qualifications or resources. This can lead to multiple negative consequences—for example, if regulatory requirements and duties are not fulfilled, laws or obligations to provide information are not complied with, or no responsibility is taken because of missing monitoring and control options.