When reviewing the process by which a contract for the outsourcing of various IT functions was completed, an IS auditor would ensure that the successful contractor:

A. has eliminated the risks of outsourcing.
B. maintains an internal audit function.
C. requires a confidentiality agreement to be signed by all employees.
D. was selected according to established business criteria.