How questioning vendor assumptions, stress-testing incident scenarios, and countering cognitive biases can safeguard customer trust in an outsourced world.