本文件为外包业务流程的IT支持服务业务流程外包（ITES-BPO）服务提供商提供风险管理实践指南。它为ITES-BPO服务的风险管理框架的规划、建立、实施、运营、监控、审查、维护和改进提供指导。 本文件: -？涵盖外包的IT业务流程； -？适用于服务提供商； -？适用于ITES-BPO的所有生命周期过程； -？不包括IT服务。 本文件中的指南与ISO 31000一致，从一个角度阐述了风险原则、风险管理框架和风险管理流程- BPO视角。

This document provides guidance on risk management practices for the IT enabled services-business process outsourcing (ITES-BPO) service provider for the outsourced business processes. It provides guidance for planning, establishing, implementing, operating, monitoring, reviewing, maintaining and improving the risk management framework for the ITES-BPO services. This document: —？covers IT enabled business processes that are outsourced; —？is applicable to the service provider; —？is applicable to all lifecycle processes of ITES-BPO; —？is not intended to cover IT services. The guidelines in this document align to ISO 31000, elaborating the risk principles, risk management framework and risk management process from an ITES-BPO perspective.