Information Security and Outsourcing IT Services

[Sam Evans <wintrmte () gmail com>]

All,

Couple of questions --

The company I work for is currently going through an investigative 
exercise looking at outsourcing IT services.  I was wondering if anyone 
has some white papers or other information around how to manage a 
security environment given that a potential large portion of the 
employees are outsourced based.

Secondly, does anyone have information regarding outsourcing an 
operational security component of an organization as well as information 
security / governance?

Thanks in advance!