What is the MOST effective way to ensure information security incidents will be managed effectively and in a timely manner?

A. Obtain senior management commitment.
B. Test incident response procedures regularly.
C. Communicate incident response procedures to staff.
D. Establish and measure key performance indicators (KPIs).