An outsourced CRO gives alternative managers institutional-grade risk leadership without a full-time hire. Here is exactly what the role covers — and when you need it.