You are in charge of managing your company's cloud service provider contract. Lately, there have been reports that sensitive data has been exfiltrated from the organization and published on the open Internet. This seems strange to you because no sensitive data is stored on company servers; it is all stored in the cloud provider's secure data center. Collaborating with the cloud service provider's security team, you should look at which of the following first to determine if there any security issues that may have resulted in unauthorized data access?