Application Service Provision: Risk Assessment and Mitigation

Authors

Thomas Kern, Erasmus UniversityFollow
Leslie P. Willcocks, London School of Economics and Political ScienceFollow
Mary C. Lacity, University of Missouri-St. LouisFollow

Abstract

Many business managers understand the value of renting applications over the Internet, such as lower total cost of ownership, fewer in-house IT staff, more rapid delivery of applications, scalable solutions, and superior cash flow. But there are also risks, such as power shifting asymmetrically to the supplier, suppliers overselling their capabilities, suppliers encountering subcontracting problems, and customer concerns about Internet security and reliability. In conducting ten case studies and surveying 270 companies, we developed a risk-assessment and risk-mitigation framework and learned four lessons about the Application Service Provision (ASP) space. One, ASP sourcing has many of the same risks as traditional IT outsourcing, but the pattern of likely risks differs. Most risks are greater with ASP, but some are the same or less. Two, business managers can learn how to assess ASP risks based on lessons from both traditional IT outsourcing and early ASP adopters. Three, mimicking ASP risk-mitigation strategies will not guarantee success, but many risk mitigation tools are available for most business environments. And four, ASP outsourcing, like all IT out-sourcing, requires significant in-house oversight.

Recommended Citation

Kern, Thomas; Willcocks, Leslie P.; and Lacity, Mary C. (2008) "Application Service Provision: Risk Assessment and Mitigation," MIS Quarterly Executive: Vol. 1: Iss. 2, Article 6.
Available at: https://aisel.aisnet.org/misqe/vol1/iss2/6