Which of the following is MOST important for the effectiveness of an incident response function?

A. Enterprise security management system and forensic tools.
B. Establishing prior contacts with law enforcement
C. Training of all users on when and how to report
D. Automated incident tracking and reporting tools