Let's assume that your security operations are stellar. You have procedures in place to keep software patches up to date, and a team that responds to incidents within minutes. A relentless focus on security permeates your enterprise. In short, in-house you're doing everything right. But how about outside your organization? Chances are a contract company is handling payroll, or perhaps employee retirement plans. Is your data safe with them?