A customer has asked you to review their procedures for securing backup media that contains sensitive data. As part of your review, you discover that there are no details concerning the vendor that actually transfers the tapes between the data center and the longterm offsite storage facility.
Which concern should you discuss with the customer?
A.
The need for a chain of trusted individuals and vendors that handle the storage media
B.
The need to know the physical location of all sensitive data at all times
C.
The vendor may not be authorized to transport sensitive media in the customer’s locale
D.
There is no measure of liability if media is lost or stolen