Thanks to the DeepSec organisation for making these videos available and let me share the videos on YouTube. Speaker: Frank Ackermann, CISSP, Security Researcher Within the last ten years, many companies all over the world thought about outsourcing, off-shore development or other possibilities to focus on their non-IT core business. Others worked out new markets and offered services based on this model. IT and information security is mostly an aspect which is not in focus when this topic is discussed by senior management. The talk describes the benefits, risks and problems within this topic and points out critical aspects to think about. The topic is discussed in combination with an allegory to offer different viewpoints. Mitigation's to reduce the risks will be presented followed by a conclusion. The talk is non-technical and does not contain any script/shell-code/proof-of-concept hack or other in-depth technical detail. For more information visit: http://bit.ly/DeepSec_2010_information To download the video visit: http://bit.ly/DeepSec_2010_videos