ABSTRACT
Broadcontractualstatementsaboutconfidentialityandsecuritywilldemonstrate thegeneralethoswhichshouldapplytotheoutsourcingactivities.Nevertheless, thisisnosubstituteforidentifyingtheareasforwhichspecificassurancesare important, toenable thecontractualcommitments tobepreciselyexpressed. Thisidentificationprocesswillformpartofthecustomer’sriskmanagement strategy,inreviewinghowsecureinpracticeeachofthesystemsandkindsof informationforwhichtheservicesarebeingprovidedshouldbe,relativelyor absolutely.
