Which of the following BEST provides an information security manager with sufficient assurance that a service provider complies with the organization's informat...