Which kind of evidence supports due diligence and ongoing monitoring in a third-party vendor assessment?

• A. Marketing collateral and customer testimonials.
• B. Pricing sheets and contract boilerplates.
• C. Third-party risk assessment reports, security questionnaires, continuous monitoring records, and contractual controls.
• D. Product roadmaps and feature lists.

Answer: (C)