Outline for Guide: Reporting on Controls at a Service Provider