When outsourcing data to a cloud service provider, which of the following should be the information security manager’s MOST important consideration?

A. Roles and responsibilities have been defined for the subscriber organization.
B. Cloud servers are located in the same country as the organization.
C. Access authorization includes biometric security verification.
D. Data stored at the cloud service provider is not co-mingled.