Why is escalation part of the detection and analysis phase of an incident response?
a. Management needs to approve additional resources.
b. NIST SP800-61 Rev. 2 requires it.
c. Incident response team leader control is necessary.
d. Investigation requires continued management action.