Deciding to outsource network security is difficult. The stakes are high, so it is no wonder that paralysis is a common reaction when contemplating whether to outsource or not. The primary argument for outsourcing is financial: a company can get the security expertise it needs much more cheaply by hiring someone else to provide it. The paper considers what to outsource and how to choose and outsourcer.