Which is the MOST important to enable a timely response to a security breach?

A. Knowledge sharing and collaboration
B. Security event logging
C. Roles and responsibilities
D. Forensic analysis