IT security strategy for Managed Service Providers