Organizations that are considering storing legally protected data in "the cloud" should ________________________.
A. contractually obligate the service provider to protect the data
B. assume that the appropriate security controls are in place
C. give their customers an option as to where data is stored
D. only use cloud storage for data replication