Another possibility, which does not necessarily imply 'shirking' of responsibility.

You effectively transfer the burden of Sarbanes-Oxley compliance from your firm to the vendor who provides software on demand.
www.pcms-team.com/whitepapers/focus.php?id=14288dc26d62bd

Abstract: As the economic burden of human immunodeficiency virus/acquired immunodeficiency syndrome (HIV/AIDS) increases in sub-Saharan Africa, allocation of the burden among levels and sectors of society is changing. The private sector has more scope to avoid the economic burden of AIDS than governments, households, or nongovernmental organizations, and the burden is being systematically shifted away from the private sector. Common practices that transfer the burden to households and government include pre-employment screening, reductions in employee benefits, restructured employment contracts, outsourcing of low skilled jobs, selective retrenchments, and changes in production technologies.
www.hst.org.za/news/20030305 - 26k