To ensure the information security of outsourced IT services, which of the following is the MOST critical due diligence activity?
Request the service provider comply with information security policy.
Review a recent independent audit report of the service provider.
Assess the level of security awareness of the service provider.
Review samples of service level reports from the service provider.
Submit