Also, demand that partners notify you of security incidents within thehour. Charles Le Grand, director of technology practices at theInstitute of Internal Auditors in Altamonte Springs, Fla., adds thatyou should ask to see your partners' criteria for notifyingauthorities and how they're monitoring for vulnerabilities. Forexample, if they operate in an NT environment, urge them to keep upwith NT BugTrack, he says.