Which is MOST important when contracting an external party to perform a penetration test?

A. Obtain approval from IT management.
B. Define the project scope.
C. Increase the frequency of log reviews.
D. Provide network documentation.