To measure the effectiveness of the incident response team (IRT), which of the following does not need to be evaluated?
A. Number of incidents
B. Financial impact to the organization
C. Tests provided to employees to gauge their response to incidents
D. Number of repeat incidents