The IT department of a large telecommunications company has developed and finalized a set of
security solutions and policies which have been approved by upper management for deployment
within the company. During the development of the security solutions and policies, the FIRST thing
the IT department should have done was:

A.
contact vendor management so the RFI and RFP process can be started as soon as possible.

B.
contact an independent consultant who can tell them what policies and solutions they need.

C.
discuss requirements with stakeholders from the various internal departments.

D.
involve facilities management early in the project so they can plan for the new security
hardware in the data center.