Which of the following is the BEST way to ensure third-party providers that process an organization's personal data are addressed as part of the data privacy st...