Which of the following is MOST critical to review when preparing to outsource a data repository to a cloud-based solution?

A. Disaster recovery plan
B. Identity and access management
C. Vendor’s information security policy
D. A risk assessment