Confused how do you limit your liability by outsourcing to a third-party? When your “good guys” have full access to each unit?

Confused how do you limit your liability by outsourcing to a third-party? When your “good guys” have full access to each unit?