Outsourcing security can work, but it becomes risky when accountability, context, and response ownership drift outside the business. [...]