Which of the following BEST indicates effective information security incident management?

A. Frequency of information security incident response plan testing
B. Percentage of high risk security incidents
C. Monthly trend of information security-related incidents
D. Average time to identify critical information security incidents