Which item is explicitly listed as part of supporting due diligence artifacts?

• A. Policies, standards, procedures
• B. Customer logos
• C. Market analysis reports
• D. Press releases

Answer: (A)

In due diligence, you’re looking for formal evidence that shows how a vendor governs and controls its activities. Policies, standards, and procedures are explicit artifacts because they document the governing framework, the specific criteria to be met, and the step-by-step methods used to operate securely and compliantly. These documents let you assess consistency with your requirements, enforceability, and the vendor’s ability to maintain controls over time. Other items listed—customer logos, market analysis reports, and press releases—are branding, external research, or communications, not evidence of the vendor’s internal governance or control environment, so they don’t serve as formal due diligence artifacts.