An IS auditor performing an audit of backup procedures observes that backup tapes are picked up weekly and stored offsite at a third-party hosting facility. Which of the following recommendations would be the BEST way to protect the data on the backup tapes?

A. Ensure that data is encrypted before leaving the facility.
B. Ensure that the transport company obtains signatures for all shipments.
C. Confirm that data is transported in locked tamper-evident containers.
D. Confirm that data transfers are logged and recorded.