Dr Sam De Silva looks at the security risks associated with outsourcing, how the outsourcing contract between the customer and service provider can be used to manage these risks, and discusses structuring and drafting the security requirements appropriately.