government $$agency $$is $$finalizing $$a $$contract $$with $$a $$third

$-$

party $$vendor $$to $$provide $$cloud $$services$.$The $$agency $$is $$highly $$concerned $$about $$data $$security $$and $$wants $$to $$ensure $$it $$can $$assess $$the $$vendor$\text{'}$s $$security $$p

$.$

$$Which $$of $$the $$following $$accurately $$identifie