A security team will be outsourcing several key functions to a third party and will require that:
Several of the functions will carry an audit burden
Attestations will be performed several times a year
Reports will be generated on a monthly basis
Which of the following best describes the document that is used to define these requirements and stipulate how
and when they are performed by the third party?


A. MOU
B. AUP
C. SLA
D. MSA