As Part of the Asset Management Life Cycle, a Company

Multiple Choice

As part of the asset management life cycle, a company engages a certified equipment disposal vendor to appropriately recycle and destroy company assets that are no longer in use. As part of the company's vendor due diligence, which of the following would be MOST important to obtain from the vendor?

A) A copy of the vendor's information security policies.
B) A copy of the current audit reports and certifications held by the vendor.
C) A signed NDA that covers all the data contained on the corporate systems.
D) A copy of the procedures used to demonstrate compliance with certification requirements.