Fictional Corp Is Trying to Choose a Cloud Service Provider

Multiple Choice

Fictional Corp is trying to choose a cloud service provider. There are many things to consider, and they have narrowed the choices down to two CSPs that could meet their technical needs. Which of the following might they also consider doing before signing any contracts or creating an account on those platforms?

A) Verify that the CSPs' backups are secure
B) Ensure that each CSP adheres to PCI DSS standards
C) Have the various agreements reviewed by the legal department
D) Ask to be able to do a security audit of the potential CSP choices they are evaluating