Recently, you created several security benchmarks and compared them to your security baselines. Then you performed a trend analysis and determined that several new security controls need to be...

Recently, you created several security benchmarks and compared them to your security baselines. Then you performed a trend analysis and determined that several new security controls need to be deployed. After testing the new security control, you decided to implement only two of the proposed controls. Once the security controls were deployed, you analyzed the controls to ensure that the business needs were met. What should you do now?

a. Create a lessons-learned report.

b. Perform a cost/benefit analysis.

c. Determine ROI on the new controls.

d. Determine the TCO on the new controls