An organization has selected a web-based solution to reduce transaction costs and improve productivity. Before implementation, an IS auditor should ensure that the organization has:

A. performed a vulnerability assessment.
B. implemented electronic data interchange.
C. validated the solution against the current IT infrastructure.
D. addressed the level of risk exposure.