Good discussion on service provider security.