Which of the following is the MOST effective approach for delivering security incident response training?

A. Perform role-playing exercises to simulate real-world incident response scenarios.
B. Engage external consultants to present real-world examples within the industry.
C. Include incident response training within new staff orientation.
D. Provide on-the-job training and mentoring for the incident response team.