Which of the following provides the MOST relevant evidence of incident response maturity?

A. Red team testing results
B. Average incident closure time
C. Independent audit assessment
D. Tabletop exercise results