It can be managed either way or through a hybrid approach. Some organizations have in-house security teams, while others may outsource to specialized security service providers.