Security first when migrating IT services externally