A university has migrated several services from their internal infrastructure to a third-party cloud
provider. Which of the following is MOST important to the university in order to ensure an
appropriate security posture?

A.
Regular patching applied by the university

B.
Governance and oversight by the cloud provider

C.
Antivirus checks performed by the cloud provider

D.
SLA and metrics requested by the cloud provider