Outsourcing a business activity is considered which of the following risk management techniques?

Outsourcing a business activity is considered a risk reduction technique. By outsourcing, an organization transfers certain activities to external service providers who possess specialized skills or resources, thereby reducing the associated risks that the organization may face if it had to manage those activities internally.

IIA guidance on risk management techniques