What is the MOST effective way to ensure information security incidents will be managed effectively and in a timely manner?

A. Establish and measure key performance indicators (KPIs)
B. Communicate incident response procedures to staff
C. Test incident response procedures regularly
D. Obtain senior management commitment