Enterprises in order to obtain the expected profits, and thus must be properly assess efforts to control IT outsourcing risk. The most commonly used non-dynamic risk management, the control process is generally carried out in accordance with the project is divided into several stages, each stage of the analysis of potential risk factors, in order to develop appropriate countermeasures.