A Simulation Model for Risk Management Support in IT Outsourcing

Tarcio Bezerra, Seth Bullock, Antao Moura


IT Outsourcing (ITO) is the practice to delegate organizational IT functions to a third party. However, this practice introduces important risks for customer organizations. We have developed a system dynamics simulation model to support ITO decision making that considers a dynamic and integrated view of capabilities management and benefits management. Two IT capabilities are modelled: Contract Monitoring (on the customer's side) and Service Delivery (on the supplier's side). In this paper the proposed model is used to assess the risks presented by a deficit in these capabilities. The results of our experiments indicate that the lack of contract monitoring capability in ITO contracting organizations directly impacts on service conclusion time and influences the cost of contract management, which is an important risk factor related to exceeding the ITO budget. It was also found that low levels of service delivery capability in the supplier most significantly impact the cost of rework and the number of penalties. These factors influence the profitability of the supplier and may induce it to abandon the contract prematurely.


  1. Abdel-Hamid, T. K., Madnick, S. E. (1991) Software Project Dynamics: An Integrated Approach, PrenticeHall.
  2. Bahli, B., Rivard, S. (2003) 'The information technology outsourcing risk:a transaction cost and agency theorybased perspective', Journal of Information Technology, (September, 2003) 18, 211-221.
  3. Bahli, B., Rivard, S. (2005) 'Validating measures of information technology outsourcing risk factors', Omega, 332, 175-187.
  4. Barney B. (1991) 'Firm resources and sustained competitive advantage', Journal of Management, vol.17, pp.99-120.
  5. Bezerra T.R., Medeiros V. R. (2013) 'Managing customers' IT capabilities in IT outsourcing over time: A system dynamic approach', Proceedings of the 8th IFIP/IEEE International Workshop on Businessdriven IT Management - BDIM.
  6. Bezerra T.R., Sampaio, A., Moura, J.A. (2014) 'A system dynamics model to support strategic decision making on IT Outsourcing: A case study at a state revenue agency in Brazil', Proceedings of the 9th IFIP/IEEE International Workshop on Business-driven IT Management - BDIM.
  7. Carvalho, S. (2009) 'Um processo para gestão de contratos de aquisição de serviços de desenvolvimento de software na administração pública', master dissertation, UFPE, Recife, Brazil, Sep. 2009.
  8. Costa, M. D., Braga, J.L., Abrantes, L.A., Ambrósio, B.G. (2013) 'Support to the Decision Making Process in Human Resources Management in Software Projects Based on Simulation Models', Revista Eletrônica de Sistemas de Informação, v. 12, n. 1, jan-mai 2013, artigo 51 doi:10.5329/RESI.2013.1201005.
  9. Cunha, Mônica C. (2011) 'Aspectos e Fatores da Terceirização de Sistemas de Informação no Setor Púbico: Um Estudo em Instituições Públicas de Alagoas”. Tese de Doutorado. Universidade Federal de Pernambuco'. In Portuguese.
  10. Earl, M.J.(1996) 'The Risk of Outsourcing IT', Sloan Management Review/Spring 1996.
  11. Garousi, V., Khosrovian, K. and Pfahl, D. (2009) 'A customizable pattern-based software process simulation model: design, calibration and application', Softw. Process: Improve. Pract., 14(3): 165-180.
  12. Gui-sem, W., Xiang-yang, L. (2010) 'The Risk Analysis on IT Service Outsourcing of Enterprise with System Dynamics', International Conference on Service Sciences, DOI 10.1109/ICSS.2010.47.
  13. Houston, D. X., Mackulak, G. T., Collofello, J. S. (2001) 'Stochastic simulation of risk factor potential effects for software development risk management', JSS 59(3), 247-257.
  14. International Standards Organization (2008) ISO 31000:2008 - Risk Management: Principles and Guidelines on Implementation.
  15. Jorfi, S., Nor, K. and Najjar, L. (2011) 'Assessing the impact of IT connectivity and IT capability on ITbusiness strategic alignment: an empirical study', Computer and Information Science, vol. 4, pp. 76-87.
  16. Lacity, M. C., Khan, S. A., Willcocks, L. P. (2009) 'A review of the IT outsourcing literature: Insights for practice', The Journal of Strategic Information Systems, 18(3), 130-146. Elsevier B.V.
  17. Lacity, M.,Khan, S., Yan, A., Willcocks, L. (2010) 'A review of the IT outsourcing empirical literature and future research directions', Journal of Information Technology, v.25, pp. 395-433.
  18. Lin, C.Y., Abdel-Hamid, T.K., Sherif, J.S. (1997) 'Software-Engineering Process Simulation Model' (SEPS). JSS 38, 263-277.
  19. Martens B., Teuteberg F. (2009) 'Why risk management matters in IT outsourcing: a literature review and elements of a research agenda', Proceedings of the 17th European Conf. on Information Systems, p. 1-13.
  20. Ngwenyama, O. K., Technology, I., Sullivan, W. E., Patricia, B. (2006) 'Secrets of a Successful Outsourcing Contract: A Risk Analysis Framework for Analysing Risk Factors. Technology, (416), 1-12.
  21. Ngwenyama, O. K., & Sullivan, W. E. (2007) Outsourcing contracts as instruments of risk management: insights from two successful public contracts', Journal of Enterprise Information Management, 20(6), 615-640.
  22. Osei-Bryson, K.M., Ngwenyama, O.K. (2006) 'Managing risks in information systems outsourcing: An approach to analyzing outsourcing risks and structuring incentive contracts', European Journal of Operational Research, 174 (1), 245-264.
  23. Pfahl D. (2005) 'ProSim/RA - Software Process Simulation in Support of Risk Assessment'. In: Biffl S, Aurum A, Boehm B, Erdogmus H, Grünbacher P (eds.) Value-based Software Engineering, Springer Press, Berlin, pp 263-286.
  24. Rivard, S., Albert, B., Patry, M. (1998) 'Assessing the Risk of IT Outsourcing', IEEE, 1998.Rivard, S., Albert, B., Patry, M., Dussault, S. (1998) 'Managing the Risk of IT Outsourcing', IEEE, Montreal.
  25. Tan, B., Anderson Jr., E.G., Dyer, J.S. and Parker, G.G. (2010) 'Evaluating system dynamics models of risky projects using decision trees: alternative energy projects as an illustrative example', System Dynamics Review, vol 26, No 1, pp 1-17, January-March, 2010.
  26. Willcocks, L. P., Lacity, M. C., Kern, T. (2000) 'Risk mitigation in IT outsourcing strategy revisited?: longitudinal case research at LISA', Information Systems, 8(1999), 285-314.

Paper Citation

in Harvard Style

Bezerra T., Bullock S. and Moura A. (2014). A Simulation Model for Risk Management Support in IT Outsourcing . In Proceedings of the 4th International Conference on Simulation and Modeling Methodologies, Technologies and Applications - Volume 1: SIMULTECH, ISBN 978-989-758-038-3, pages 339-351. DOI: 10.5220/0005035703390351

in Bibtex Style

author={Tarcio Bezerra and Seth Bullock and Antao Moura},
title={A Simulation Model for Risk Management Support in IT Outsourcing},
booktitle={Proceedings of the 4th International Conference on Simulation and Modeling Methodologies, Technologies and Applications - Volume 1: SIMULTECH,},

in EndNote Style

JO - Proceedings of the 4th International Conference on Simulation and Modeling Methodologies, Technologies and Applications - Volume 1: SIMULTECH,
TI - A Simulation Model for Risk Management Support in IT Outsourcing
SN - 978-989-758-038-3
AU - Bezerra T.
AU - Bullock S.
AU - Moura A.
PY - 2014
SP - 339
EP - 351
DO - 10.5220/0005035703390351