What risks do offshore outsourcing of AIS functions pose to satisfying the principles of confidentiality and privacy?  Are there any particular security procedures that you think should be mandatory when outsourcing overseas? 

PLEASE POST 200 WORDS WITH REFERENCES