With the rapid development of information technology and global economy, many
prominent changes have occurred at the area of international trade in the past. One of the most
important changes is the information technology outsourcing (ITO), which is the main
security topic of this paper. The ITO insecure risks occur in the implementation steps of the
ITO-based projects, and with Principal-Agent theory, a new incentive reward-punishment
model was proposed to generate the optimal contract on the asymmetric information condition.
The experimental results show that the construction of this new model has positive
significance for guiding the secure outsourcing enterprise management.