IT outsourcing is a viable option for organizations to maintain competitiveness and get the ability to focus on core competences. However, there are risks involved, such as handing over sensitive information to another organization, lack of knowledge of the security experiences of the other part, differences in culture and way of working, etc. Trust is therefore becoming a more and more important issue in IT outsourcing relationships. This paper aims to identify and describe the process of achieving trust in IT outsourcing relationships. A framework was created based on an extensive literature survey. Three concept areas are included: contract, culture, and security. Each area is described, and critical success factors (CSF) were developed to support practical use.