Which of the following is MOST important when selecting a third-party security operations center?

A. Indemnity clauses
B. Independent controls assessment
C. Incident response plans
D. Business continuity plans