. "Examining the security practices of companies who are outsourced for work such as payroll or Web hosting" . . . .