How is the incident count for a new system managed in order to avoid overwhelming the
incident response team?

A.
Match count thresholds are set.

B.
More than one policy is enabled.

C.
Many incident responders are allowed access to the system.

D.
Incidents are auto-filtered to hide false positives.