Outsourcing of security functions is increasingly becoming a strategic lever in balancing efficiency, talent shortages, and rising regulatory requirements (e.g., DORA). But where are the boundaries between risk transfer and loss of control? In this roundtable, we discuss opportunities, risks, and best practices from the perspectives of risk, IT, and compliance.