An organization's __________________ should contain a clear description of the authority assigned to the CSIRT while responding to an active security incident.
a. Incident response policy
b. Security incident response plan
c. CSIRT charter
d. Response team guidelines
