How business processes as services can increase the threat surface.