which two things should be required if a company has an outside company that destroys sensitive corporate documents? (choose two.)