Using which of the following metrics will BEST help to determine the resiliency of IT infrastructure security controls?

A. Number of successful disaster recovery tests
B. Percentage of outstanding high-risk audit issues
C. Frequency of updates to system software
D. Number of incidents resulting in disruptions