How would you handle a situation where a third-party service does not meet Vodafone’s security requirements?