An enterprise is evaluating a Software-as-a-Service (SaaS) solution to support a core business process. There is no outsourcing governance or vendor management in place. The CEO's FIRST course of action should be to:

A. establish a contract with the SaaS solution provider.
B. instruct management to use the standard procurement process.
C. ensure the service level agreements (SLAs) for service providers are defined.
D. ensure the roles and responsibilities to manage service providers are defined.