See article in Information Security Magazine by Paul Rohmeyer about the information security risks associated with the use of contractors.