
Um on the risk side obviously you have a huge lack of control. Um if you outsource to private company it's easier because uh you have a contract you have terms and condition but if you outsource to uh informal actors like um independent hackers, e-rime groups or even activist group uh you don't have full control of them over them. They have their own uh motivation and they some most of the time only partially align uh with the state's motivation and their motivation or their engagements can also change in times.