A director of IR is reviewing a report regarding several recent breaches. The director complies the following statistics:

Initial IR engagement time frame

Length of time

before an executive management notice went out

Average IR phase completion

The director wants to use data to shorten the response time. Which of the following would accomplish this?

A. CSIRT

B. Containment phase

C. Escalation notifications

D. Tabletop ex

ercise