A lot of this depends on the company. For example, you are not permitted to do certain kinds of outsourcing for security if you host certain kinds of servers (designated “critical infrastructure”) or have access to certain kinds of data (such as sensitive government research). Most companies do their best to keep…