Watch this video on YouTube
During an audit of a third-party vendor's security controls, you find that the vendor is not encrypting sensitive customer data in transit. What steps should you take to address this finding?