An enterprise has decided to use third-party software for a business process which is hosted and supported by the same third party. The BEST way to provide quality of service oversight would be to…

Robust change management is critical for managing changes to the service but does not provide comprehensive oversight of the ongoing quality of the service provider's entire operation.

Periodic service provider audits involve regular reviews of the third party's operations, security controls, performance metrics, and adherence to service level agreements (SLAs), providing direct verification and assurance of the quality of service being delivered over time.

A process for enterprise architecture (EA) updates is for internal strategic planning and documentation, not for directly overseeing the quality of a third-party service.

Qualifying service providers is done initially during selection; it does not provide ongoing quality of service oversight once the provider is already engaged.