CompTIA Security+ (SY0-701) SY0-701 — Question 466

A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?