Senior management is reviewing the results of a recent security incident with significant business impact. Which of the following findings should be of GREATEST concern?

A. Response efforts had to be outsourced due to insufficient internal resources.
B. Significant gaps are present in the incident documentation.
C. Response decisions were made without consulting the appropriate authority.
D. The incident was not logged in the ticketing system.