Terms seem to change meaning so often in IT. It used to be that outsourcing conjured up images of Bangalore. For many firms, outsourcing is now synonymous with software-as-a-service from companies such as Salesforce.com, Intuit and ADP, which will — for a healthy fee — help an organisation trim the fat off its business processes. While software-as-a-service may work miracles for your bottom line, surrendering control of a business process to a partner doesn’t mean you also jettison the risk of your data being exposed. In fact, you probably increase the risk.