Which of the following is the BEST practice to ensure that a third-party vendor responsible for data destruction has followed proper procedures?
Choose a reputable third-party vendor.
Rely on random audits of the vendor's facilities.
Conduct regular in-house inspections.
Obtain a certification of destruction or recycling from the vendor.