Why is escalation part of the detection and analysis phase of an incident response? a. Management needs to approve additional resources. b. NIST SP800-61 Rev. 2 requires it. c. Incident response team leader control is necessary. d. Investigation requires continued management action.