Measurement and monitoring of security from the perspective of a service provider