Information technology outsourcing (ITO) is a USD multi-trillion industry. There is growing competition among ITO service providers to improve their service deliveries. Natural language processing (NLP) is a technique, which can be leveraged to gain a competitive advantage in the ITO industry. This paper explores the information security implications of using NLP in ITO. First, it explores the use of NLP to enhance information security risk management (ISRM) in ITO. Then, it delves into the information security risks (ISRs) that may arise from the use of NLP in ITO. Finally, it proposes possible ISRM approaches to address those ISRs in ITO from the use of NLP. The study follows a qualitative approach using the case study method. Nine participants from three organisations (an ITO client, service provider and sub-contractor) engaged in an ITO relationship in the ICT industry were interviewed through a semi-structured questionnaire. The research findings were verified through a focus group. Case study scenarios are provided for a clear understanding of the findings. To the best of our knowledge, it is the first study to investigate the information security implications of the use of NLP in ITO.

信息技术外包 (ITO) 是一个价值数万亿美元的产业。ITO 服务提供商之间的竞争日益激烈，以改善他们的服务交付。自然语言处理 (NLP) 是一种技术，可用于在 ITO 行业中获得竞争优势。本文探讨了在 ITO 中使用 NLP 的信息安全影响。首先，它探讨了使用 NLP 来增强 ITO 中的信息安全风险管理 (ISRM)。然后，深入探讨了在 ITO 中使用 NLP 可能产生的信息安全风险 (ISR)。最后，它提出了可能的 ISRM 方法，以通过使用 NLP 来解决 ITO 中的那些 ISR。该研究遵循使用案例研究方法的定性方法。来自三个组织的九名参与者（ITO 客户，服务提供商和分包商）在 ICT 行业从事 ITO 关系，通过半结构化问卷进行了访谈。研究结果通过焦点小组验证。提供了案例研究场景，以便清楚地了解调查结果。据我们所知，这是第一项调查在 ITO 中使用 NLP 的信息安全影响的研究。