A bank has decided to outsource some existing IT functions and systems to a third party service provider. The
third party service provider will manage the outsourced systems on their own premises and will continue to
directly interface with the bank’s other systems through dedicated encrypted links. Which of the following is
critical to ensure the successful management of system security concerns between the two organizations?

A.
ISA

B.
BIA

C.
MOU

D.
SOA

E.
BPA