Outsourcing it security yes, it’s still your problem

The document discusses outsourcing IT security. It notes that outsourcing is common now and companies must decide when, not if, to outsource. When outsourcing, companies must select the right provider, establish who is in control, own the risks, architect the right solution, maintain flexibility, manage SLAs, balance needs, establish governance through collaboration, consider the provider part of the team, and realize governance has costs. The key messages are that outsourcing is normal now and companies must thoughtfully partner with providers while maintaining ownership of security.