Which of the following is the MOST important outcome of testing incident response plans?

A. Internal procedures are improved.
B. An action plan is available for senior management.
C. Staff is educated about current threats.
D. Areas requiring investment are identified.