The firm’s CISO has been working with the Chief Procurement Officer (CPO) and the Senior
Project Manager (SPM) on soliciting bids for a series of HIPS and NIPS products for a major
installation in the firm’s new Hong Kong office. After reviewing RFQs received from three vendors,
the CPO and the SPM have not gained any real data regarding the specifications about any of the
solutions and want that data before the procurement continues. Which of the following will the
CPO and SPM have the CISO do at this point to get back on track in this procurement process?

A.
Ask the three submitting vendors for a full blown RFP so that the CPO and SPM can move to
the next step.

B.
Contact the three submitting vendor firms and have them submit supporting RFIs to provide
more detailed information about their product solutions.

C.
Provide the CPO and the SPM a personalized summary from what the CISO knows about
these three submitting vendors.

D.
Inform the three submitting vendors that there quotes are null and void at this time and that they
are disqualified based upon their RFQs.