Negligent Liability & IT Outsourcing Negligent Entrustment Essay

Negligent Liability & IT Outsourcing

Negligent Entrustment Liability

Negligent entrustment is where personally identifiable information is outsourced to an insecure back-office operation (Rustad, 2007). Organizations have an affirmative duty to ensure that data is secure regardless of whether it is in-house or outsourced, or where it gets outsourced to. The liability centers on the companies who have direct liability to consumers and businesses, not just the outsource operation.

has international standards for the protection of intellectual property. U.S. companies have an independent duty of care to ensure third world back-office operation comply with reasonable data security standards. It is a company's duty to do security audits before transmitting sensitive information. Negligent enablement lawsuits come about to hold the handler of information directly liable for facilitating or paving the way for cybercrime by direct negligence. AU.S. organization that does not do security audits on the outsource operations can be held liable for the negligent acts of the outsource operations.'Depending on the organizational industry, laws, such as SOX, HIPAA, and identity theft laws, apply to the U.S. organization. There are also global requirements that present legal issues of taxes, labor laws, and safety regulation requirements (Jones). Firms must legally protect information, privacy of employees and customers, and safeguard trade secrets. The firm has the legal responsibility to make sure that information is protected under all laws that pertain to the particular information, even if it is outsourced. Companies face huge risks of legal issues if they do not have the means to ensure the safeguarding of information with outsourced information. They must have a means of monitoring the outsource operations of the information to ensure the protection of the information itself.

Outsourcing IT

SOX, Section 404, Management Assessment of Internal Controls, the majority of internal controls are embedded in the technology system (Hall, 2007). And, SOX, Section….....