Abstract:This paper constructs a contract-theory model to investigate how an MSSP’s (Managed Security Service Provider) operating characteristics of cost efficiency, multiple clients, security externality and firms’ information nature affect the MSSP’s strategic decisions, including the contract structure and the optimum investment level for firms. The analysis shows that firms’ information nature, either complementary or substitutable, plays a crucial role in influencing an MSSP’s decisions. First, the MSSP tends to provider a contract with a lower refund and exert a lower security investment level when the degree of complementation is higher while tending to provider a contract with a higher refund and exert a higher security investment level when the degree of substitution is higher. Second, there is a lot of differences that how the security externality affects the decisions of the MSSP who serves complementary firms and that who serves substitutable firms. Third, the MSSP’s optimum refund (service fee) to complementary firms is greater than firms’ expected loss (expected cost), while the MSSP’s optimum refund (service fee) to substitutable firms is smaller than firms’ expected loss (expected cost). Fourth, serving a smaller number of substitutable firms is more economic for an MSSP while serving complementary firms the more the better. In addition, the optimum contract structures between an MSSP and complementary (and substitutable) firms are discussed in this paper. These findings give some insights that can guide an MSSP to determine an optimum contract structure and investment level for firms. Future research directions are discussed based on the limitations and possible extensions of this study.

Design and analysis of IT outsourcing contract with introduction of insurance mechanism

The Aftermath of Information Technology Outsourcing: an Empirical Study of Firm Performance Following Outsourcing Decisions

Design and analysis of contracts for IT service outsourcing with uncertain requirements

Incentive Research of Information Technology Outsourcing of Both Principal and Agent’s Risk Aversion

Strategy and Vendor Selection in It Outsourcing: is There A Method in the Madness?

The Theoretical Research on Contracts in IT Service Industry

Contract Design for Service Outsourcing under Joint Production Perspective

Research on IT Outsourcing Timing under Uncertainty

Information Technology Outsourcing Incentive Research of Bilateral Moral Hazard of Output Elasticity

Contract design for equipment after-sales service with business interruption insurance

Relational incentive contracts for multiobjective IT outsourcing with incomplete measurement

The Recognition, Measurement and Avoidance of Risks in Financial Services Outsourcing

Research on the Design of Enterprise Information Security Outsourcing Contract Based on Instalment Payment

To outsource or not to outsource? Warranty service provision strategies considering competition, costs and reliability

Contract selection under moral hazard and capital restrictions of service providers in R&D outsourcing: Punishments or rewards

Impirical Research on IT Service Industry's Outsourcing Services to the Employment Impact in the Country of Origin

An insurance theory based optimal cyber-insurance contract against moral hazard

Dynamics and Endogeny for recursive processes on trees

Service Outsourcing: Capacity, Quality and Correlated Costs

Decisions Making in Information Security Outsourcing: Impact of Complementary and Substitutable Firms

An Incentive Model of IT Outsourcing Based on Monitoring and Controlling