A company policy requires third-party suppliers to self-report data breaches within a specific time frame. Which
of the following third-party risk management policies is the company complying with?


A. MOU
B. SLA
C. EOL
D. NDA