A company is contracting a new third-party organization that will handle storage of the company's critical data. Which of the following policies would ensure th...