{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,7]],"date-time":"2025-11-07T09:34:25Z","timestamp":1762508065600,"version":"3.37.3"},"reference-count":29,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T00:00:00Z","timestamp":1587340800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T00:00:00Z","timestamp":1587340800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["71871155","71631003"],"award-info":[{"award-number":["71871155","71631003"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Inf Syst Front"],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1007\/s10796-020-10009-4","type":"journal-article","created":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T16:04:18Z","timestamp":1587398658000},"page":"773-790","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Outsourcing Strategies for Information Security: Correlated Losses and Security Externalities"],"prefix":"10.1007","volume":"23","author":[{"given":"Chenglong","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nan","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianjian","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dahui","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Minqiang","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,4,20]]},"reference":[{"issue":"3","key":"10009_CR1","doi-asserted-by":"publisher","first-page":"638","DOI":"10.1287\/mnsc.2013.1763","volume":"60","author":"A Cezar","year":"2013","unstructured":"Cezar, A., Cavusoglu, H., & Raghunathan, S. (2013). Outsourcing information security: Contracting issues and security implications. Management Science, 60(3), 638\u2013657.","journal-title":"Management Science"},{"issue":"4","key":"10009_CR2","doi-asserted-by":"publisher","first-page":"901","DOI":"10.1111\/j.1540-5915.1998.tb00881.x","volume":"29","author":"P Chalos","year":"1998","unstructured":"Chalos, P., & Sung, J. (1998). Outsourcing decisions and managerial incentives. Decision Sciences, 29(4), 901\u2013919.","journal-title":"Decision Sciences"},{"issue":"1","key":"10009_CR3","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1287\/isre.1080.0223","volume":"21","author":"D Dey","year":"2010","unstructured":"Dey, D., Fan, M., & Zhang, C. (2010). Design and analysis of contracts for software outsourcing. Information Systems Research, 21(1), 93\u2013114.","journal-title":"Information Systems Research"},{"key":"10009_CR4","doi-asserted-by":"crossref","unstructured":"Ding, W., & Yurcik, W. (2005). Outsourcing internet security: The effect of transaction costs on managed service providers. In international conference on telecommunication systems\u2014Modeling and analysis, Dallas, TX, November (pp. 17-20).","DOI":"10.1007\/11600930_96"},{"key":"10009_CR5","unstructured":"Ding, W., & Yurcik, W. (2006). Economics of internet security outsourcing: Simulation results based on the Schneier model. In workshop on the economics of securing the information infrastructure (WESII), Washington DC, October (pp. 23-24)."},{"key":"10009_CR6","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1016\/j.ins.2013.02.036","volume":"256","author":"N Feng","year":"2014","unstructured":"Feng, N., Wang, H. J., & Li, M. (2014). A security risk analysis model for information systems: Causal relationships of risk factors and vulnerability propagation analysis. Information Sciences., 256, 57\u201373.","journal-title":"Information Sciences."},{"key":"10009_CR7","doi-asserted-by":"publisher","unstructured":"Feng, N., Chen, Y., Feng, H., Li, D., & Li, M. (2020). To outsource or not: The impact of information leakage risk on information security strategy. Information & Management. https:\/\/doi.org\/10.1016\/j.im.2019.103215.","DOI":"10.1016\/j.im.2019.103215"},{"issue":"3","key":"10009_CR8","doi-asserted-by":"publisher","first-page":"883","DOI":"10.3982\/ECTA9100","volume":"81","author":"G Fischer","year":"2013","unstructured":"Fischer, G. (2013). Contract structure, risk-sharing, and investment choice. Econometrica, 81(3), 883\u2013939.","journal-title":"Econometrica"},{"issue":"2","key":"10009_CR9","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1287\/isre.1050.0053","volume":"16","author":"E Gal-Or","year":"2005","unstructured":"Gal-Or, E., & Ghose, A. (2005). The economic incentives for sharing security information. Information Systems Research, 16(2), 186\u2013208.","journal-title":"Information Systems Research"},{"issue":"2","key":"10009_CR10","doi-asserted-by":"publisher","first-page":"423","DOI":"10.1007\/s10796-013-9411-3","volume":"17","author":"X Gao","year":"2015","unstructured":"Gao, X., Zhong, W., & Mei, S. (2015). Security investment and information sharing under an alternative security breach probability function. Information Systems Frontiers, 17(2), 423\u2013438.","journal-title":"Information Systems Frontiers"},{"key":"10009_CR11","unstructured":"George R. (2016). Security to go: Is it time to shop MSSPs? InformationWeek, Available at http:\/\/www.informationweek.com\/."},{"issue":"2","key":"10009_CR12","doi-asserted-by":"publisher","first-page":"329","DOI":"10.1007\/s10796-012-9390-9","volume":"16","author":"K Hausken","year":"2014","unstructured":"Hausken, K. (2014). Returns to information security investment: Endogenizing the expected loss. Information Systems Frontiers, 16(2), 329\u2013336.","journal-title":"Information Systems Frontiers"},{"issue":"6","key":"10009_CR13","doi-asserted-by":"publisher","first-page":"1285","DOI":"10.1007\/s10796-019-09959-1","volume":"21","author":"M Heidt","year":"2019","unstructured":"Heidt, M., Gerlach, J. P., & Buxmann, P. (2019). Investigating the security divide between SME and large companies: How SME characteristics influence organizational IT security investments. Information Systems Frontiers, 21(6), 1285\u20131305.","journal-title":"Information Systems Frontiers"},{"issue":"1","key":"10009_CR14","doi-asserted-by":"publisher","first-page":"17","DOI":"10.2753\/MIS0742-1222250102","volume":"25","author":"RJ Kauffman","year":"2008","unstructured":"Kauffman, R. J., & Sougstad, R. (2008). Risk management of contract portfolios in IT services: The profit-at-risk approach. Journal of Management Information Systems, 25(1), 17\u201348.","journal-title":"Journal of Management Information Systems"},{"issue":"2\u20133","key":"10009_CR15","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1023\/A:1024119208153","volume":"26","author":"H Kunreuther","year":"2003","unstructured":"Kunreuther, H., & Heal, G. (2003). Interdependent security. Journal of Risk and Uncertainty, 26(2\u20133), 231\u2013249.","journal-title":"Journal of Risk and Uncertainty"},{"issue":"4","key":"10009_CR16","doi-asserted-by":"publisher","first-page":"904","DOI":"10.1016\/j.dss.2011.02.009","volume":"51","author":"YJ Lee","year":"2011","unstructured":"Lee, Y. J., Kauffman, R. J., & Sougstad, R. (2011). Profit-maximizing firm investments in customer information security. Decision Support Systems, 51(4), 904\u2013920.","journal-title":"Decision Support Systems"},{"issue":"2","key":"10009_CR17","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1287\/isre.1120.0447","volume":"24","author":"CH Lee","year":"2013","unstructured":"Lee, C. H., Geng, X., & Raghunathan, S. (2013). Contracting information security in the presence of double moral hazard. Information Systems Research, 24(2), 295\u2013311.","journal-title":"Information Systems Research"},{"issue":"1","key":"10009_CR18","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1016\/j.dss.2011.05.007","volume":"52","author":"D Liu","year":"2011","unstructured":"Liu, D., Ji, Y., & Mookerjee, V. (2011). Knowledge sharing and investment decisions in information security. Decision Support Systems, 52(1), 95\u2013107.","journal-title":"Decision Support Systems"},{"issue":"5","key":"10009_CR19","doi-asserted-by":"publisher","first-page":"459","DOI":"10.1016\/0167-9236(92)90029-O","volume":"8","author":"WB Richmond","year":"1992","unstructured":"Richmond, W. B., Seidmann, A., & Whinston, A. B. (1992). Incomplete contracting issues in information systems development outsourcing. Decision Support Systems, 8(5), 459\u2013477.","journal-title":"Decision Support Systems"},{"key":"10009_CR20","unstructured":"Rowe, B. R. (2008). Will outsourcing IT security lead to a higher social level of security? In workshop on the economics of information security, Pittsburgh, PA, June, (pp. 16-22)."},{"issue":"5","key":"10009_CR21","doi-asserted-by":"publisher","first-page":"1205","DOI":"10.1007\/s10796-016-9648-8","volume":"19","author":"D Schatz","year":"2017","unstructured":"Schatz, D., & Bashroush, R. (2017). Economic valuation for information security investment: A systematic literature review. Information Systems Frontiers, 19(5), 1205\u20131228.","journal-title":"Information Systems Frontiers"},{"issue":"4","key":"10009_CR22","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1109\/MC.2002.1012426","volume":"35","author":"B Schneier","year":"2002","unstructured":"Schneier, B. (2002). The case for outsourcing security. Computer, 35(4), 20\u201326.","journal-title":"Computer"},{"issue":"2","key":"10009_CR23","doi-asserted-by":"publisher","first-page":"258","DOI":"10.1287\/isre.1080.0196","volume":"20","author":"S Sen","year":"2009","unstructured":"Sen, S., Raghu, T. S., & Vinze, A. (2009). Demand heterogeneity in IT infrastructure services: Modeling and evaluation of a dynamic approach to defining service levels. Information Systems Research, 20(2), 258\u2013276.","journal-title":"Information Systems Research"},{"key":"10009_CR24","doi-asserted-by":"crossref","unstructured":"Straub, D. W., & Welke, R. J. (1998). Coping with systems risk: Security planning models for management decision making. MIS Quarterly, 441\u2013469.","DOI":"10.2307\/249551"},{"issue":"2","key":"10009_CR25","doi-asserted-by":"publisher","first-page":"457","DOI":"10.1007\/s10796-010-9292-7","volume":"14","author":"B Swar","year":"2012","unstructured":"Swar, B., Moon, J., Oh, J., & Rhee, C. (2012). Determinants of relationship quality for IS\/IT outsourcing success in public sector. Information Systems Frontiers, 14(2), 457\u2013475.","journal-title":"Information Systems Frontiers"},{"issue":"12","key":"10009_CR26","doi-asserted-by":"publisher","first-page":"1726","DOI":"10.1287\/mnsc.43.12.1726","volume":"43","author":"ET Wang","year":"1997","unstructured":"Wang, E. T., Barron, T., & Seidmann, A. (1997). Contracting structures for custom software development: The impacts of informational rents and uncertainty on internal development and outsourcing. Management Science, 43(12), 1726\u20131744.","journal-title":"Management Science"},{"issue":"2","key":"10009_CR27","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1287\/isre.1120.0437","volume":"24","author":"T Wang","year":"2013","unstructured":"Wang, T., Kannan, K. N., & Ulmer, J. R. (2013). The association between the disclosure and the realization of information security risk factors. Information Systems Research, 24(2), 201\u2013218.","journal-title":"Information Systems Research"},{"issue":"3","key":"10009_CR28","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1287\/mnsc.38.3.307","volume":"38","author":"S Whang","year":"1992","unstructured":"Whang, S. (1992). Contracting for software development. Management Science, 38(3), 307\u2013324.","journal-title":"Management Science"},{"issue":"1","key":"10009_CR29","doi-asserted-by":"publisher","first-page":"123","DOI":"10.2753\/MIS0742-1222300104","volume":"30","author":"X Zhao","year":"2013","unstructured":"Zhao, X., Xue, L., & Whinston, A. B. (2013). Managing interdependent information security risks: Cyberinsurance, managed security services, and risk pooling arrangements. Journal of Management Information Systems, 30(1), 123\u2013152.","journal-title":"Journal of Management Information Systems"}],"container-title":["Information Systems Frontiers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-020-10009-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10796-020-10009-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-020-10009-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,14]],"date-time":"2021-07-14T00:14:06Z","timestamp":1626221646000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10796-020-10009-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,20]]},"references-count":29,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2021,6]]}},"alternative-id":["10009"],"URL":"https:\/\/doi.org\/10.1007\/s10796-020-10009-4","relation":{},"ISSN":["1387-3326","1572-9419"],"issn-type":[{"type":"print","value":"1387-3326"},{"type":"electronic","value":"1572-9419"}],"subject":[],"published":{"date-parts":[[2020,4,20]]},"assertion":[{"value":"20 April 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}