Following a risk assessment, new countermeasures have been approved by management. Which of the following should be performed NEXT?

A. Develop an implementation strategy.
B. Schedule the target end date for implementation activities.
C. Budget the total cost of implementation activities.
D. Calculate the residual risk for each countermeasure.