Depends on the company. Processes vary, but for my former corporate employer, to give you an example, giving someone money in exchange for SaaS software needs 1) Vendor assessment 2) IT Risk Assessment 3) Privacy Assessment 4) Information Security Assessment 5) Proving ROI to budgeting people and getting their approval 6) Purchase order to a cost center.