A.Organizational information security awareness

B.Mature security policy

C.Organizational culture

D.Information security roles and responsibilities

A.A destruction-of-data clause m the contract

B.Right to terminate clauses In the contract

C.Results of the cloud provider's control report

D.Requirements for data encryption

A.Residual risk analysis

B.Threat assessment

C.Business impact analysis (BIA)

D.Vulnerability assessment

A.Provide security training for developers.

B.Prepare detailed acceptance criteria

C.Adhere to change management processes.

D.Perform a security gap analysis.

A.Define acceptable information for posting.

B.Perform a vulnerability assessment

C.Identify secure social networking sites

D.Establish disciplinary actions for noncompliance