Security is a top concern for everyone in the application service provider space.
With so many options on the market, it can be difficult for customers and ASPs to pick the right kinds of security for storage and transmission of sensitive corporate information. Perhaps the ideal security product for ASPs is one that gives customers the most comfort, is reasonably cost-effective, and can be managed by a staff that may not be expert in security. The toughest part for ASPs is that their customers hold them to a security double standard. These customers often expect better security for their remotely hosted systems and data than they provide for their local systems. I find this ironic, considering most security infractions occur from inside an organization, not outside.