Which of the following is MOST important to the university in order to ensure an appropriate security posture?

A university has migrated several services from their internal infrastructure to a third-party
cloud provider. Which of the following is MOST important to the university in order to ensure
an appropriate security posture?

A.
Regular patching applied by the university

B.
Governance and oversight by the cloud provider

C.
Antivirus checks performed by the cloud provider

D.
SLA and metrics requested by the cloud provider