The sales team is considering the deployment of a new CRM solution within the enterprise. The IT
and Security teams are members of the project; however, neither team has expertise or
experience with the proposed system. Which of the following activities should be performed
FIRST?

A.
Visit a company who already has the technology, sign an NDA, and read their latest risk
assessment.

B.
Contact the top vendor, assign IT and Security to work together to implement a demo and pen
test the system.

C.
Work with Finance to do a second ROI calculation before continuing further with the project.

D.
Research the market, select the top vendors and solicit RFPs from those vendors.