Which of the following would BEST demonstrate the maturity level of an organization's security incident response program?

A. An increase in the number of reported incidents
B. A decrease in the number of reported incidents
C. A documented and live-tested incident response process
D. Ongoing review and evaluation of the incident response team