Which of the following provides the GREATEST assurance that an organization allocates appropriate resources to respond to information security events?

A. Incident classification procedures
B. Threat analysis and intelligence reports
C. An approved IT staffing plan
D. Information security policies and standards.