which of the following is the proper sequence for creating a cirt plan?
A. Assess threats and select risk response, monitor performance, develop and communicate policy, acquire and implement solutions
B. Develop and communicate policy, monitor performance, assess threats and select risk response, acquire and implement solutions
C. Assess threats and select risk response, acquire and implement solutions, monitor performance, develop and communicate policy
D. Assess threats and select risk response, develop and communicate policy, acquire and implement solutions, monitor performance
