Joel also writes “If you have customers, never outsource customer service.”. I think “security” is in the same category.