Which of the following is the MOST important outcome of testing incident response plans?

A. Staff is educated about current threats.
B. An action plan is available for senior management.
C. Areas requiring investment are identified.
D. Internal procedures are improved.