Which clause in this contract is a responsibility of the controller?

A controller can contract out the processing of personal data to another company, provided a written contract between these partners is in place.

Which clause in this contract is a responsibility of the controller?
A . To ensure that persons authorized to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
B . To make available all information necessary to demonstrate compliance with the obligations laid down in the GDPR and allow for and contribute to audits, including inspections.
C . To process the personal data only on documented instructions, including with regard to transfers of personal data to a third country or an international organization.
D . To provide sufficient guarantees for appropriate technical and organizational measures in such a manner that processing will meet the requirements of the GDP

Answer: A