Which of the following is MOST important to verify when reviewing the effectiveness of response to an information security incident?

A. Lessons learned have been implemented.
B. Testing has been completed on time.
C. Test results have been properly recorded.
D. Metrics have been captured in a dashboard.