The decision to outsource by a company is influenced by numerous factors, including cost reduction, enhanced productivity, and improved performance quality. Outsourcing firms, as service providers, enable their clients to concentrate on core business functions, such as the information technology (IT) operations of the organization. However, IT outsourcing activities are susceptible to various risks, including resource shortages that impede client satisfaction, challenges in employee training, and human errors leading to system malfunctions. This research aims to conduct an operational risk management assessment utilizing the AS/NZS ISO 31000:2009 framework. The risk management process initiates with the identification of risks, their sources, and their potential impacts; proceeds with an evaluation of these risks based on their likelihood and potential consequences; and culminates in an analysis of the underlying causes and the formulation of strategies to mitigate these risks. The processes of risk identification and assessment are conducted by individuals recognized as experts within the company. Data for this research were gathered using the expert judgment approach, with respondents including the CEO, COO, GA, Finance and Accounting Manager, Sales Manager, and PMO. The implementation and evaluation of this research were carried out through a comprehensive review of the company’s operational activities, grounded in the AS/NZS ISO 31000:2009 framework and the risk management methodologies articulated by Cooper et al. This study identified 140 risk impacts, comprising 82 internal risks and 58 external risks. The findings indicate a reduction in risk severity compared to the initial conditions. Initially, 39 risks were classified as high (22.11% of the 140 identified risks). Following the calculation of residual risks, 8 risks remained categorized as high (5.71% of the 140 identified risks), while 31 risks were downgraded to low or moderate levels.