Exam CIPT topic 1 question 247 discussion

A Back-up-as-Service (BaaS) provider backs up corporate data and stores it with an outsider provider under contract with the organization. A researcher notifies the organization that he found unsecured data in the cloud. The organization looked into the issue and realized one of its backups was misconfigured on the outside provider's cloud and the data was fully exposed to the open internet. The service provider quickly secured the backup. Which is the best next step the organization should take?