Which of the following terms should be included in a contract to help a company monitor the ongoing security
maturity of a new vendor?


A. A right-to-audit clause allowing for annual security audits
B. Requirements for event logs to be kept for a minimum of 30 days
C. Integration of threat intelligence in the company's AV
D. A data-breach clause requiring disclosure of significant data loss