Which of the following is MOST important to have in place to ensure the effectiveness of risk and security metrics reporting?
A . Organizational reporting process.
B . Incident reporting procedures.
C . Regularly scheduled audits.
D . Incident management policy.
Answer: B