研究結果顯示，委外生命週期中最常發生風險的階段為「合約中階段」，最容易發生風險的主要管理活動為「6.委外專案執行」。主要常見的風險項目為：合約前階段的「A2.1 不適當的預估時程表及所需資源」，合約中階段的「B4.1 合約未指定適當的量表」、「B4.2 合約未指定不履約處罰」、「B4.10 供應商鎖定 (Lock-in)」、「B6.1 過度依賴供應商」、「B6.5 變更和逐漸產生的目標/範圍/需求」，以及合約後階段的「C7.1 缺乏評價測量標準和工具」。 Information system outsourcing is very popular nowadays, therefore to be successful when outsourcing a project is particularly important. The purpose of this case study is to understand the risk of information system outsourcing, and thus preventing the risks and improve the success rate of information system outsourcing projects.
From literature reviews and practical experiences, this paper developed a conceptual framework of information system outsourcing risks based on an outsourcing life cycle. 23 samples of outsourcing contracts and within the period of 3 years and its related information were extracted from the Bank A for this case study. This paper reviews the risks from the selected 23 outsourcing projects and discusses the possible risks for each phases of the outsourcing life cycle. The major findings and implication of the case study are also discussed in this paper.
The result shows that the most risky phase of the outsourcing life cycle is "Contract phase". The most risky managerial activity is "6. Outsourcing project execution". The most common risk items are "A2.1 Unrealistic estimation of schedule & required resources" of pre-contract phase, "B4.1 Failure to specify appropriate measures", "B4.2 Failure to specify non-performance penalties", "B4.10 Vendor lock-in", "B6.1 Over dependence on the vendor", "B6.5 Changing & creeping objectives/scope/requirements" of contract phase, and "C7.1 Lake of assess measurement, metrics, and tools" of post-contract phase.
