Gerard J. Nicol said...

>The net risk of identity theft is exactly the same irrespective of where you
>have your data processed. Human ability and nature is common throughout our
>species.

I am not sure if the risks of identity theft are exactly 100% the same if you have your data processed in Bourke, Boston, Bangor, Bangkok or Bangalore.  However, there are definitely risks involved. Anyone who thinks that this is "Bull" or anything else should reconsider their opinions.  There are also costs involved.  

When procuring any service, you have to weigh up the costs against the benefits and risks.  In any business decision, you MUST identify the risks involved, determine how you can minimise them to an acceptable level and then work out if its worth the extra cost to do so.  If you do not do this, you are either going to spend a great load of money to reduce the risks or leave your business open to unacceptable consequences.

If you are weighing up more than one option (and you are mad if you dont), you should determine if the risks are the same, or one option has a higher risk than another option.  Then you work out if you are willing to pay the premium to mitigate any risk.

The decision to outsource offshore (or anywhere else) does have its risks, including risk to reputation if something goes wrong and even a 'moral/emotional' risk if it is perceived that you are 'taking away local jobs'.  It is vital to determine if you are willing to take those risks.

Risk Management is not an easy discipline.

John Lovejoy
[log in to unmask]
My own views, not anyone else's

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance