After a client has developed a security policy， what is recommended that they do next？（）

• A、monitor and respond
• B、analyze and improve
• C、secure the network
• D、test the system