Hiring a specialized company to provide consulting services for the information security department