An information security manager has been asked to provide contract guidance from a security perspective for outsourcing the organization's payroll processing Wh...