They want to avoid a repeat of the recent data breach ( https://www.

You have been contracted by Verizon as a high-priced consultant to help them manage their cloud vendor better in the future. They want to avoid a repeat of the recent data breach (https://www.upguard.com/breaches/verizon-cloud-leak).

Of the 5 Key Management Practices of APO10, APO10.4 and APO10.5 seem to be most appropriate. Of the combined 8 sub activities, pick three that you think would have the most value. Which ones did you pick, why, and propose specific items to monitor (3 parts to each answer) 

1.      Activity 1:

a.      Which Sub-activity?:

b.     Why chose this one?:

c.      Specific item to monitor:

2.      Activity 2:

a.      Which Sub-activity?:

b.     Why chose this one?:

c.      Specific item to monitor:

3.      Activity 3:

a.      Which Sub-activity?:

b.     Why chose this one?:

c.      Specific item to monitor: