Which of the following is MOST important for an external auditor to review to verify that a cloud service provider's controls are designed and operating effecti...