Also be sure to check out the main practices site for lots of great info including Web Services Secuirty Guidance.