Outsourcing is not an abdication of the organisation's security responsibilities to an external contracting vendor. While leveraging on the economies of scale and technical expertise of the supplier, the organisation needs to make sure that the outsourced IT project or service does not introduce...