InfoSec wants to be involved whenever a vendor or other third$-$party service provider is engaged. Which function should InfoSec establish a process with to help facilitate this?

General Counsel

Corporate Security

Human Resources

Purchasing$/$Procurement