Which due diligence activity for supply chain security should occur in the initiation phase of the software acquisition life cycle?
A) Vendor assessment and selection
B) Code review and testing
C) Incident response planning
D) Continuous monitoring and evaluation