An IT security expert-friend turned me onto a free 70-minute long video/PowerPoint presentation on the topic of "Security and Outsourcing."
It's led by John O'Leary, a trainer for the Computer Security Institute. The coverage is high-level, intended more for managers than implementers.
It'll make you aware of the issues involved when you consider outsourcing security. Well worth sitting through at your computer — though the sound quality isn't great when members of the audience are speaking and sharing their insights and practices.
You'll have to register to attend. Go here and scroll down to find session CRT-6.