In order to understand an organization`s security posture, it is MOST important for an organization`s senior leadership to: 

Answer options:

A. ensure established security metrics are reported.
B. review the number of reported security incidents.
C. assess progress of risk mitigation efforts.
D. evaluate results of the most recent incident response test.

A