security cctv cross site scripting service provider assessment access control php hosting glba security standard service provider compliance fisap web application security shared xss server bits modulo alarm domain