Outsource expertise to maintain compliance with ISO 27001