This study – based on a careful review of the literature and the analysis of some case studies (database of the Management Engineering Department of the University of Udine, Italy) – has attempted to develop an assessment framework useful to understand the main risks and tools for data and knowledge protection along the various steps of a offshoring/outsourcing project. The framework has been implemented and tested in a company in the Northwest of Italy, which operates in the engineering industry