But you don't have access to check whether they're safeguarding or managing or protecting the information in the way you would for the department. That's the problem. If it's farmed out, you don't have the reach.
On November 24th, 2009. See this statement in context.