What are the primary security considerations when architecting solutions for the financial services industry?