Outsourcing IT to other countries adds to cyber risks, report says

New white paper warns of increasing national security risks from cyber threats

A new report charged that the government's outsourcing significant portions of the nation’s IT has created escalating cybersecurity risks.

The report by the Intelligence and National Security Alliance’s (INSA) Cyber Council warned that federal authorities have outsourced a substantial share of IT to countries in which hackers have an easier time of gaining unauthorized access into IT systems and supply chains.

"The U.S. government has significantly outsourced significant portions of the design, implementation and maintenance of IT to other countries, where our potential adversaries can easily insert themselves into our logistical chains," states the white paper released Sept. 12.

The outsourcing is for economic reasons, but it fails to take into account the increased security risks presented to IT systems at home, the report states.

Related coverage:

Senators argue cybersecurity leadership

“The present situation is as dangerous as if the United States decided to outsource the design of bridges, electrical grids, and other physical infrastructure to the Soviet Union during the Cold War,” INSA states. No specific examples of outsourcing are provided.

The paper lays out a comprehensive view of the rising level of risks to IT infrastructures in the U.S. due to cyberattacks originating all over the world.

It calls for an organized effort to develop defensive cyber activities and to fully leverage cyber intelligence on a national and global scale.

In cyberspace, it takes little education or money to start cyberattacks, while public and private organizations incur a substantial cost to defend against such attacks, the report states.

“While quantifiable assessments of the net impact of cyberattacks are difficult to discern, the cost is great enough to warrant the need for a cybersecurity apparatus supported by sophisticated cyber intelligence,” the report concluded.

The report recommended that officials:

  • Systematically define and establish effective cyber intelligence approaches, professions, skill sets, training, education and technologies.
  • Enable cyber intelligence policies and pilot efforts across industry, academia/non-profits, and government.
  • Establish public-private cyber outreach forums.
  • Build a meaningful partnership among all relevant agencies and the private sector to ensure the seamless sharing of information.


About the Author

Alice Lipowicz is a staff writer covering government 2.0, homeland security and other IT policies for Federal Computer Week.


  • Congress
    U.S. Capitol (Photo by M DOGAN / Shutterstock)

    Funding bill clears Congress, heads for president's desk

    The $1.3 trillion spending package passed the House of Representatives on March 22 and the Senate in the early hours of March 23. President Trump is expected to sign the bill, securing government funding for the remainder of fiscal year 2018.

  • 2018 Fed 100

    The 2018 Federal 100

    This year's Fed 100 winners show just how much committed and talented individuals can accomplish in federal IT. Read their profiles to learn more!

  • Census
    How tech can save money for 2020 census

    Trump campaign taps census question as a fund-raising tool

    A fundraising email for the Trump-Pence reelection campaign is trying to get supporters behind a controversial change to the census -- asking respondents whether or not they are U.S. citizens.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.