You are the security manager for an organization that uses the cloud for its production

environment. According to your contract with the cloud provider, your organization is responsible for patching. A new patch is issued by one of your vendors. You decide not to apply it immediately for fear of interoperability problems. Who may impose penalties on your organization for this decision if the vulnerability is exploited?

A$.$ The cloud provider

B$.$ Regulators

C$.$ Your end clients

D$.$ Your Internet service provider $($ISP$)$

A$.$ The cloud provider

B$.$ Regulators

C$.$ Your end clients