Q30
Single choice
A healthcare enterprise that is subject to strict compliance requirements has decided to outsource several key IT services to third-party providers.
Which of the following would be the BEST way to assess compliance and avoid reputational damage?