The internal auditor at Company ABC has completed the annual audit of the company’s financial
system. The audit report indicates that the accounts receivable department has not followed
proper record disposal procedures during a COOP/BCP tabletop exercise involving manual
processing of financial transactions.
Which of the following should be the Information Security Officer’s (ISO’s) recommendation?
(Select TWO).

Company ABC has recently completed the connection of its network to a national high speed
private research network. Local businesses in the area are seeking sponsorship from Company
ABC to connect to the high speed research network by directly connecting through Company
ABC’s network. Company ABC’s Chief Information Officer (CIO) believes that this is an
opportunity to increase revenues and visibility for the company, as well as promote research and
development in the area.
Which of the following must Company ABC require of its sponsored partners in order to document
the technical security requirements of the connection?