According to IIA guidance, which of the following would be the best first step to manage risk when a third party is overseeing the organization's network and da...