After analysing the collected data, what is the next step?

1. Analysis is of no use if it stays with the analyst. 2. The result has to reach the decision makers. 3. Analyze the data collected and report findings, determining the appropriate response. 4. So the answer is report findings. _Source: NIST SP 800-137, 'Information Security Continuous Monitoring for Federal Information Systems and Organizations'_