Acme Corp has selectively outsourced proprietary business processes to ABC Services. Due to some technical
issues, ABC services wants to send some of Acme Corp’s debug data to a third party vendor for problem
resolution. Which of the following MUST be considered prior to sending data to a third party?

A.
The data should be encrypted prior to transport
B.
This would not constitute unauthorized data sharing
C.
This may violate data ownership and non-disclosure agreements
D.
Acme Corp should send the data to ABC Services’ vendor instead
Explanation:
With sending your data to a third party is already a risk since the third party may have a different policy than
yours. Data ownership and non-disclosure is already a risk that you will have to accept since the data will be
sent for debugging /troubleshooting purposes which will result in definite disclosure of the data.