You work for HDA Inc. as an auditor of their information system. You are analyzing how well an organization handles incidents by evaluating its incident response program. Which of the following is the MOST reliable indication that the program is meeting its objectives?