A customer has asked you to review their procedures for securing backup media that contains
sensitive data. As part of your review, you discover that there are no details concerning how the
vendor actually transfers the tapes between the data center and the long-term offsite storage
facility.
Which concern should you discuss with the customer?

A.
The requirement for a chain of trusted individuals and vendors that handle the storage media

B.
The physical location of all sensitive data needs to be known at all times

C.
The vendor may not be authorized to transport sensitive media in the customer’s locale

D.
There is no measure of liability if media is lost or stolen