In evaluating a Cloud service provider and as part of a proper governance framework, what is required for compliance? A. Exception reports B. Management reviews C. Performance reports D. Statement on Auditing Standards