Brand protection as a managed service: each capability set against the in-house challenge it creates and the managed answer, so build-vs-buy is a per-capability decision.