Outsourcing cyber security