Which of the following should be established FIRST when initiating a control self-assessment program in a small organization?

A. Control baselines
B. Client questionnaires
C. External consultants
D. Facilitated workshops