When considering a third-party cloud service provider, which of the following criteria would be the BEST to include in the security assessment process?

a) Cost-effectiveness and scalability
b) Geographic location and network speed
c) Compliance certifications and data encryption
d) Service-level agreements and customer support