This paper presents the findings of an ongoing research study into offshore information technology and systems outsourcing. Fieldwork was conducted in India and the United Kingdom to identify different strategies and scenarios. Based on the premise that offshore outsourcing poses greater risks than using suppliers from the home country, the research develops a risk assessment matrix comprising four scenarios: body shopping; maintenance and support of system hardware and software; IT architecture design; and strategy and product development. As offshore outsourcers develop resources and capabilities to offer high value-added work, this increases their own risk, and those of the customer.