Which of the following is the MOST effective way for an organization to ensure its third-party service providers are aware of information security requirements...