Regulating phone companies' security standards