If you're an IT manager who hasn't touched anything other than packages of Microsoft stuff in years, then one of the simplest ways to de-risk the process is to outsource it