Assessing the risk of IT outsourcing · Study