An enterprise is evaluating a Software as a Service (SaaS) solution to support a core...

According to the CGEIT certification guide, the CEO’s first course of action should be to ensure that there is a clear governance framework for outsourcing and that the roles and responsibilities for managing service providers are defined and assigned. This will help to establish accountability, oversight and control over the SaaS solution and its provider. References := CGEIT certification guide, domain 1: Governance of Enterprise IT, section 1.3: Governance Frameworks, page 17.