Firing your security team is dumb.
You cannot outsource your risk.
Any sufficiently large business should have security staff to reduce risk.
"Oops we got busted and leaked all our customer data" cannot be followed by "Because so and so at another company didn't do their job"