Which of the following is the BIGGEST concern for a chief information security officer regarding interconnections with systems outside the enterprise?
1) Requirements to comply with each other's contractual security obligations
2) Uncertainty that the other system will be available as needed
3) The ability to perform risk assessments on the other system
4) Ensuring that communications between the two systems are encrypted through a virtual private network tunnel