An information security manager has become aware that a third-party provider is not in compliance with the statement of work (SOW). Which of the following is th...