The company is about to upgrade a financial system through a third party, but wants to legally
ensure that no sensitive information is compromised throughout the project. The project manager
must also make sure that internal controls are set to mitigate the potential damage that one
individual’s actions may cause. Which of the following needs to be put in place to make certain
both organizational requirements are met? (Select TWO).

A.
Separation of duties

B.
Forensic tasks

C.
MOU

D.
OLA

E.
NDA

F.
Job rotation