Watch this video on YouTube
How can an organization best ensure that an external service provider complies with organizational security policies?