Which is MOST important when contracting an external party to perform a penetration test?

A. Provide network documentation
B. Obtain approval from IT management
C. Define the project scope
D. Increase the frequency of log reviews