SECURING VIRTUAL ENTERPRISES : REQUIREMENTS AND ARCHITECTURAL CHOICES