4. Implications of an entity using a service organization