Which artifact is listed among supporting due diligence artifacts as a detailed network component?

• A. Sanitized network diagrams
• B. Customer contracts
• C. Employee handbooks
• D. Security camera footage

Answer: (A)

Understanding what supports a thorough risk assessment in third-party due diligence involves recognizing artifacts that reveal how a network is actually laid out and protected. Sanitized network diagrams provide a detailed map of the network topology, showing components like firewalls, DMZs, routers, switches, VPN paths, and data flows, while removing sensitive details. This combination lets evaluators see where the attack surface lies, how segments are protected, and where controls are placed, which is exactly what you need to assess security posture without exposing secrets. The diagrams are kept sanitized so confidential information isn’t disclosed, yet the essential structure remains visible for effective risk analysis.

Other artifacts mentioned don’t serve this specific purpose. A customer contract shows obligations and terms, not the technical architecture. An employee handbook covers internal policies rather than network design or security controls. Security camera footage doesn’t illuminate how the network is built or protected.