CompTIA Security+ (SY0-701) SY0-701 — Question 255

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?