Which of the following is the first step in responding to an incident?

Question $3$Select one:

A$.$

Develop and maintain a clear security policy.

B$.$

Recognize that an incident has occurred.

C$.$

Conduct routine vulnerability assessments.

D$.$

Train all computer system users on acceptable and unacceptable behavior.