A major medical corporation is investigating deploying a web based portal for patients to access their
medical records. The medical corporation has a long history of maintaining IT security but is considering
having a third party vendor create the web portal. Which of the following areas is MOST important for the
Chief Information Security Officer to focus on when reviewing proposal from vendors interested in
creating the web portal?

A.
Contractor background check

B.
Confidentiality and availability

C.
Redundancy and privacy

D.
Integrity and confidentiality