This paper examines information technology outsourcing risk through the dual lenses of transaction cost theory and agency theory. Drawing on Bahli and Rivard (2003) and related scholarship, it defines key theoretical concepts — bounded rationality, opportunism, and information asymmetry — and applies them to the specific risk categories that arise in IT outsourcing relationships, including lock-in, contractual amendments, unexpected transition costs, and disputes and litigation. The paper argues that expertise asymmetry between clients and suppliers is a central driver of outsourcing risk, and concludes with practical risk management recommendations for organizations that choose to pursue IT outsourcing arrangements.
The paper demonstrates the technique of applying competing but complementary theoretical lenses to a single phenomenon. By introducing transaction cost theory and agency theory separately and then showing how they jointly explain the same set of outsourcing risks, the writer builds a layered analytical argument rather than a simple descriptive summary. This comparative theoretical framing is a core skill in business and information systems writing.
The paper opens with a brief abstract-style overview, moves into a definition-heavy introduction that contextualizes the $500 billion outsourcing industry, then introduces the two theoretical frameworks before cataloguing four specific risk types in detail. A dedicated risk management section offers prescriptive guidance, and the conclusion synthesizes the expertise-asymmetry theme. This introduction–theory–risk–mitigation–conclusion architecture is a reliable model for applied research papers in business and technology.
Outsourcing has been a major issue of concern in recent years (Schultz, 2009). Many enterprises utilize outsourcing as a cost-savings measure. However, there are also significant risks associated with outsourcing. This paper examines information technology outsourcing risk through a transaction cost and agency theory-based perspective.
There are many different business processes that can be outsourced. The most common types are customer service and information technology. Outsourcing is defined as "contracting, sub-contracting, or 'externalizing' non-core activities to free up cash, personnel, time, and facilities for activities where the firm holds competitive advantage. Firms having strengths in other areas may contract out data processing, legal, manufacturing, marketing, payroll accounting, or other aspects of their businesses to concentrate on what they do best and thus reduce average unit cost. Outsourcing is often an integral part of downsizing or reengineering" ("Outsourcing").
According to Ketter (2008), information technology outsourcing and the outsourcing of other business processes is a $500 billion industry. The author explains that this business is not going away any time soon. The main reasons why companies choose to outsource include "reducing costs in operations, development, and sales; tapping vendors' best practices and innovations; gaining access to human capital; and increasing the flexibility and scalability of operations" (Ketter, 2008, p. 14). Indeed, many large companies rely heavily on the outsourcing of information technology functions. Although outsourcing is a popular business strategy, it is not without risks.
According to Bahli and Rivard (2003), although outsourcing can be and has been beneficial for many businesses, it has also been detrimental for others. Some businesses have reported that IT outsourcing did not deliver the benefits they hoped for. In some cases the practice led to failure to meet the appropriate service level and also failed to result in cost savings. These failures represent just some of the risks that companies take when they choose to outsource IT functions.
Bahli and Rivard (2003) explain that there are many different definitions associated with the word risk. In general, risk can be defined as "the probability of occurrence of an undesirable event, the severity of its consequences, or the variability of returns on assets" (Bahli & Rivard, 2003). The authors also explain that there are economic and managerial definitions of risk. The economic perspective posits that risk is the "variance of a probability distribution of possible gains and losses associated with a given alternative." The managerial definition differs in that it focuses only on negative outcomes. The ambiguity concerning positive outcomes is largely ignored; instead, risks and their management are correlated with negative outcomes viewed as hazards.
Bahli and Rivard (2003) further explain that IT outsourcing risks are unique and therefore carry unique definitions and business associations. Accordingly, IT outsourcing risks must be explored through two specific theoretical frameworks: transaction cost theory and agency theory.
Transaction cost theory involves two key precepts: bounded rationality and opportunism (Aubert et al., 2003). Bounded rationality is the failure of the mind to comprehend all of the information associated with a transaction (Aubert et al., 2003). This creates a scenario in which transactions take place but some uncertainty remains associated with the process (Aubert et al., 2003). According to Bahli and Rivard (2003), in the context of IT outsourcing, the effect of bounded rationality is determined by the knowledge and skills the client possesses with respect to enumerating requirements, choosing the right suppliers, and managing the relationship between client and supplier (p. 213).
Opportunism involves the defense of one's own interest or value maximization (Aubert et al., 2003). In other words, opportunism involves the pursuit of self-interest in a manner that is deceitful — that is, individuals or groups will go to considerable lengths to secure their self-interest. For example, in the context of IT outsourcing, suppliers may exaggerate the extent of their capabilities or exploit their knowledge advantage over clients that lack experience regarding what they need or how much it costs (Bahli & Rivard, 2003). IT suppliers may also act opportunistically because they view it as a means to dominate a market segment, gain competitive advantage, or enter a new market (Kern et al., 2002; Bahli & Rivard, 2003).
According to Aubert et al. (2003), the combination of these two precepts results in information asymmetry:
"When parties do not have the same information, they will not share the information they possess, because they wish to use it strategically. In order to strike a better deal, sellers will hide negative characteristics of their products, and buyers will not reveal how much they are prepared to pay. Since both parties know that the other is opportunistic, each will engage in information-seeking activities — for example, having a product tested before buying it, or asking for warranties and safeguards to protect themselves from potentially false allegations from the other party. All these actions generate transaction costs" (Aubert et al., 2003).
The authors also explain that transaction costs are usually divided into the following subsets (Aubert et al., 2003):
(1) Asset specificity — the particular assets that will be needed to complete the tasks in a transaction.
(2) Uncertainty surrounding the transaction — the doubt or lack of knowledge associated with the transaction process.
(3) Source of essential investments — the origin of the investments needed for the transaction and their position relative to the distribution of residual rights.
Agency theory involves the process by which the relationship between agents and principals is managed. In the realm of IT outsourcing, agency theory posits that "each party in the relationship has their own profit motive, because the parties' goals are not congruent. The principal cannot monitor the actions of the agent perfectly and without cost" (Sappington, 1991; Bahli & Rivard, 2003).
Bahli and Rivard (2003) explain that agency theory and transaction cost theory together identify several risk categories associated with IT outsourcing.
The research found that there are many risks associated with IT outsourcing in the context of transaction cost theory and agency theory. The risks seem to have a great deal to do with the expertise levels of clients and suppliers. If the client has a great deal of expertise, it will have the ability to greatly minimize costs and therefore minimize risks associated with IT outsourcing. On the other hand, if the supplier has a great deal of expertise and the client does not, the supplier can use that expertise to act opportunistically. This creates a substantial risk for the client. Even if both the client and the supplier have considerable experience and expertise, risks still exist in the IT outsourcing process. For this reason, risk management strategies must be explored and implemented so that the risks associated with IT outsourcing can be effectively mitigated.
You’re 51% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.