http://www.infolawgroup.com/2010/02/articles/information-security-contracts/developing-an-information-security-and-privacy-schedule-for-service-provider-transactions/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+InfoLawGroup+%28Info+Law+Group%29