Which of the following is MOST important to verify when reviewing the effectiveness of response to an information security incident?
A . Lessons learned have been implemented.
B . Testing has been completed on time.
C . Test results have been properly recorded.
D . Metrics have been captured in a dashboard.
Answer: D