Comment by keithpeter

Would those obligations be spelled out in the contract for data centre services?

I'm interested in whether the ISPs have any form of protection against the disruption caused by a customer of a shared service coming under a criminal attack of this kind.