Security threat classification for outsourced IT projects

Almutairi, M; Riddle, S

doi:10.1109/RCIS.2017.7956579

Security threat classification for outsourced IT projects

Lookup NU author(s): Moneef Almutairi, Dr Stephen Riddle ORCiD

Downloads

Accepted version [.pdf]

Licence

This is the authors' accepted manuscript of a conference proceedings (inc. abstract) that has been published in its final definitive form by IEEE Computer Society, 2017.

For re-use rights please refer to the publisher's terms and conditions.

Abstract

© 2017 IEEE. Many organisations have adopted outsourcing for delivering critical IT services to their clients. Organisations need to identify the potential security threats of outsourced IT projects as early as possible to avoid or mitigate security incidents. Existing threat classification approaches suffer from limitations such as the lack of exhaustive threat classification criteria. In this paper, we propose a threat classification approach for outsourced IT projects. This approach aims to allow organisations to identify, minimise, mitigate, or eliminate security threats at the early stages of project execution.