Should a library inquire about how a vendor handles incident response and breach notification?

• A. Yes; it helps ensure timely notification and remediation.
• B. No; it's irrelevant to privacy.
• C. Only the vendor's marketing materials matter.
• D. Only the library's IT staff needs to know.

Answer: (A)