What is meant by "reasonable steps" in the context of selecting service providers?
Reasonable steps refer to due diligence in choosing vendors that can maintain security practices consistent with the order.