Which of the following statements regarding recommended vendor due diligence procedures is MOST ACCURATE?

An organization should avoid revealing that it is seeking information about potential vendors prior to starting its relationship with them.

An organization should perform audits of potential vendors before agreeing to conduct business with them.

An organization should request that new vendors complete a questionnaire about their background immediately after signing a contract with them.

An organization should ensure that vendors have their own ethics and compliance program before engaging in any transactions with them.