Which of the following does NOT relate to the hiding of sensitive data from data sets?

Which of the following would NOT be included as input into the requirements gathering for an application or system?

The BCDR plan/process should be written and documented in such a way that it can be used by ____________.
Response:

Devices in the cloud datacenter should be secure against attack. All the following are means of hardening devices, except:
Response:

_________ is the legal concept whereby a cloud customer is held to a reasonable expectation for providing security of its users' and clients' privacy data in their control.
Response: