The BEST way to facilitate the reporting and escalation of potential security incidents to appropriate stakeholders is to define incident classifications based on the:

A. technique used to launch the attack

B. vulnerability exploited by the attack

C. verified source and industry rating of the incident

D. severity and impact of the incident