All good points. I would add that another risk factor is the off-shoring of IT services I’ve worked with a number of the large IT out-sourcing company in India. I found that, although a majority of the employees are decent people, there are two issues that create additional risks for US IT organizations:
- the loyalty of the employees is with their employer, which writes the paychecks and the employees do not always have the interest of the client as a priority; and
- these IT outsourcing companies often staff activities with the best profit margin as opposed to the most competent.