Pat plans on outsourcing their Information Technology (IT) services so that they can focus on designing cars and trucks. Which is the BEST way for them to monitor the effectiveness of the service provider?

Domain 1: Security and Risk Management Practice Questions
Questions from the following topics are included in this domain:
Basics of security and risk management
    Differing data roles and responsibilities
    Identifying administrative, physical, and technical controls
    Ethics of security professionals
    Administrative policies, procedures, and guidelines
    Object categorization and classification
    Importance of security training