handle outsourcing risks