The most important action before selecting a Software as a Service (SaaS) vendor is to complete a risk assessment. A risk assessment will identify potential risks associated with the service and help determine whether the vendor's controls and practices are sufficient to mitigate those risks. This ensures that any potential vulnerabilities are addressed and that the vendor can meet the organization’s security and compliance requirements.