Title:
Outsourcing Cybersecurity: Governance Risks of Managed Security Service Provider (MSSP) Dependence in Healthcare Organizations

Authors:
Dr. Gilbert B. Mengnjo, Dr. Robb Shawe, USA

Abstract:

This study examines the governance risks associated with dependence on managed security service providers (MSSPs) in healthcare organizations. As healthcare systems expand and face increasing regulatory, operational, and cybersecurity complexity, many organizations outsource critical security functions to external vendors. Although this approach may provide operational efficiency and access to specialized expertise, it can also create governance fragmentation, weaken internal oversight, and reduce institutional visibility into cyber risk management. Using a conceptual governance analysis informed by organizational case evidence from a multi-state healthcare provider, this study explores how MSSP dependence influences decision authority, accountability, compliance management, and strategic cybersecurity resilience. The article introduces a conceptual governance model to illustrate the structural risks of cybersecurity outsourcing. It provides practical implications for healthcare leaders seeking to balance outsourced capability with internal governance responsibility.

DOI: http://dx.doi.org/10.51505/ijaemr.2026.11304