1.Assuming you go with this system, who will be accountable for the protection of your data?
2.What is this vendors mission regarding security of information?
3.Is there a privacy policy for EfortlessHR.com that relates to your needs?
4.Based on your impact assessment for confidentiality, is the vendor, in your assessment, adequately protecting it your satisfaction?
5.Why or why not (any technology or practice that you can see)?
6.Based on your impact assessment for Integrity, is the vendor, in your assessment, adequately protecting it your satisfaction?
7.Why or why not (any technology or practice that you can see)?
8.Based on your impact assessment for Availability, is the vendor, in your assessment, adequately protecting it your satisfaction?
9.Why or why not (any technology or practice that you can see)?