Exploitation of auctions for outsourcing security-critical projects

ICT outsourcing may introduce several risks. This paper attempts to mitigate this problem by applying an auctioning scheme. By adopting the scheme, the involved organization selects one or more potential outsourced service providers via an auction similar to the FCC spectrum ones. The project is div...

Full description

Saved in:
Bibliographic Details
Main Authors: Kandias, M., Mylonas, A., Theoharidou, M., Gritzalis, D.
Format: Conference Proceeding
Language:English
Subjects:
Auction
FCC
IT Security
Measurement
Outsourcing
Resource management
Risk management
Security
Security-Critical
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:ICT outsourcing may introduce several risks. This paper attempts to mitigate this problem by applying an auctioning scheme. By adopting the scheme, the involved organization selects one or more potential outsourced service providers via an auction similar to the FCC spectrum ones. The project is divided in sub-projects, bidders are pre-evaluated, in terms of security and each bid is assessed in terms of cost and appropriate security metrics. The bidding process continues according to the auction rules allocating all the sub-projects to the best bidders. The ultimate goal is to achieve upgraded security, while keeping the cost at a reasonable level and meeting adequate security requirements. In this direction our model provokes competition and motivates providers to place superior bids, in terms of security, while providing flexibility to the organization. The auction process is demonstrated through a case study, where the outsourcer is a critical infrastructure organization.
ISSN:1530-1346
2642-7389
DOI:10.1109/ISCC.2011.5983912