Which of the following statements are NOT requirements of governance and enterprise risk management in a cloud environment?

Inspecting and accounting for risks inherited from cloud supply chain members is a core, formally recognized requirement of cloud governance and enterprise risk management.

Although B appears to describe a legitimate activity, it is identified as a non-requirement in this context - selecting only B ignores that C is equally not a requirement, making E the complete answer.

Negotiating long-term contracts with vetted software vendors is a procurement consideration, not an ERM governance requirement - but selecting only C misses that B is also designated a non-requirement.

Providing transparency to stakeholders and shareholders is a recognized and legitimate cloud governance obligation, making it a genuine requirement rather than an exception.

Negotiating long-term contracts based on software vetting (C) is a procurement strategy, not a defined governance or ERM requirement in cloud environments. The framing in B, which describes respecting supply chain risk interdependency and communicating it, does not match any formally recognized ERM requirement - recognized obligations focus on assessing and accounting for inherited risks and providing stakeholder transparency, as reflected in A and D.