In an effort to reduce internal email administration costs, a company is determining whether to
outsource its email to a managed service provider that provides email, spam, and malware
protection. The security manager is asked to provide input regarding any security implications of
this change.

Which of the following BEST addresses risks associated with disclosure of intellectual property?

A.
Require the managed service provider to implement additional data separation.

B.
Require encrypted communications when accessing email.

C.
Enable data loss protection to minimize emailing PII and confidential data.

D.
Establish an acceptable use policy and incident response policy.