An Organization Has a Short-Term Agreement with a Public Cloud

An organization has a short-term agreement with a public Cloud Service Provider (CSP) . Which of the following BEST protects sensitive data once the agreement expires and the assets are reused?

A) Recommend that the business data owners use continuous monitoring and analysis of applications to prevent data loss
B) Recommend that the business data owners use internal encryption keys for data-at-rest and data-in-transit to the storage environment
C) Use a contractual agreement to ensure the CSP wipes and data from the storage environment
D) Use a National Institute of Standards and Technology (NIST) recommendation for wiping data on the storage environment