For the first time, the procurement department has requested that IT grant remote access to third-party suppliers. Which of the following is the BEST course of action for IT in responding to the request?

A. Analyze risks and propose a solution.
B. Implement a remote access architecture.
C. Develop a remote access policy.
D. Issue log-on credentials to third-party suppliers.