A case study in Security Policies and Awareness mentions requirements for reporting suspected security events. Which answer is most accurate?

A. Incident reporting policy B. Data handling policy C. Clean desk policy D. Cyber security