Explain what constitutes a shared services provider and a referenced control