Which of the following is the BEST approach to ensure ongoing compliance and security posture of a third-party vendor post-contract signing?
Rely solely on the vendor-supplied compliance reports.
Define strict SLAs and consider the vendor monitoring process complete.
Perform regular independent audits of the vendor's practices.
Implement only vendor-supplied security tools for monitoring.