ACME Corp. is in need of a CSP. They have two CSPs that might satisfy their technical requirements after taking into account a number of factors. Which action might they additionally think about doing before committing to any agreements or opening an account on such platforms?
1) Verify that the CSPs' backups are secure.
2) Ensure that each CSP adheres to PCI DSS standards.
3) Have the various agreements reviewed by the legal department.
4) Ask to be able to do a security audit of the potential CSP choices they are evaluating.