Executives want proof that the response program can adapt to a new attack technique. What provides the strongest evidence?

1. A statement that the plan was approved three years ago
2. A relevant exercised scenario with measured outcomes and verified corrective actions
3. A supplier's general claim of industry leadership
4. An increase in the number of incident categories