Value-driven Security Agreements in Extended Enterprises
Virginia N. L. Franqueira, Roel J. Wieringa · CLOK (University of Central Lancashire) · 2010
Abstract—Today organizations are highly interconnected in business networks called extended enterprises. This is mostly facilitated by outsourcing and by new economic models based on pay-as-you-go billing; all supported by IT-as-a-service. Although outsourcing has been around for some time, what is now new is the fact that organizations are increasingly outsourcing critical business processes, engaging on complex service bundles, and moving infrastructure and their manage-ment to the custody of third parties. Although this gives com-petitive advantage by reducing cost and increasing flexibility, it increases security risks by eroding security perimeters that used to separate insiders with security privileges from outsiders without security privileges. The classical security distinction between insiders and outsiders is supplemented with a third