An enterprise has entered into a new market which brings additional regulatory compliance requirements. To address these new requirements, the enterprise should FIRST:

A. update the organization's risk profile.
B. have executive management monitor compliance.
C. outsource the compliance process.
D. appoint a compliance officer.