Which of the following is MOST critical when creating an incident response plan?

A. Identifying what constitutes an incident
B. Identifying vulnerable data assets
C. Aligning with the risk assessment process
D. Documenting incident notification and escalation processes