Step Four: Answer questions: Will you share your shared responsibility matrix, do you keep all data in US, do you outsource any work to contractors, if you start using offshore services or getting bought do you give me three months notice, and get out of contract.