After three vendors submit their requested documentation, the CPO and the SPM can better
understand what each vendor does and what solutions that they can provide. But now they want to
see the intricacies of how these solutions can adequately match the requirements needed by the
firm. Upon the directive of the CPO, the CISO should submit which of the following to the three
submitting firms?

A.
A T&M contract

B.
An RFP

C.
A FFP agreement

D.
A new RFQ