Organizations considering handing over their security to a managed provider must outsource the right processes while ensuring the third party instills proper controls.