How to ensure outsourced software development is secure