Which of the following is the BEST control to protect an organization's sensitive data when using a publicly available cloud storage service?

A. Cryptographic hash function performed by the cloud vendor
B. Transparent volume encryption offered by the cloud vendor
C. Data encryption performed by the organization prior to uploading
D. Transport layer security (TLS) between the cloud vendor and the organization