Mechanisms exist to use qualitative and quantitative data from incident response testing to: ?Determine the effectiveness of incident response processes; ?Continuously improve incident response processes; and ?Provide incident response measures and metrics that are accurate, consistent, and in a reproducible format.