A security consultant has been hired by a company to establish its vulnerability management program. The consultant is now in the deployment phase. Which of the following tasks is part of this process

During the deployment phase of a vulnerability management program, the focus shifts to operationalizing the program by selecting, procuring, and configuring the actual technologies (e.g., scanners, SIEM integrations, patch management tools) that will execute the defined processes. This phase translates planning decisions into working infrastructure, making technology procurement a defining deployment task.

Determining a budget and cost analysis is a planning/pre-deployment phase activity, performed before deployment begins, to secure funding and define the program's scope.

Measuring the effectiveness of the program's stated goals is a post-deployment or operations/review phase activity, conducted after the program is running to assess outcomes.

Educating and training key stakeholders is typically associated with the awareness or rollout phase that follows deployment, ensuring personnel can use and support the implemented tools and processes.