Mitigating Potential Risk Arising From Third-Party Outsourcing