NIST Special Publication 800-95 addresses security needs for networks in which automated Web services are being deployed in service-oriented architectures.  It’s only in draft but it covers the basics fairly well. If you’re doing business with the government and you plan to offer consumable services it’s worth making sure you follow the recommendations since the NIST requirements will start showing up in RFPs soon.