After a client has developed a security policy, what is recommended that they do next?

After a client has developed a security policy, what is recommended that they do next?

A.
analyze and improve

B.
test the system

C.
secure the network

D.
monitor and respond