Which of the following incident handling process phases is responsible for
defining rules,
a. collaborating human workforce,
b. creating a backup plan,
c. testing plans for an organization?