Buying vs Building a Remote Access Solution

Where can I find articles, white papers, etc. which discuss the different things a company should look at when determining whether it makes sense to buy a managed SSL VPN service for remote access versus building an in-house solution?