A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of...