Adam is a risk manager for a major financial services company. Having recently collected a set of high-risk threat data from the threat intelligence sharing community, Adam responded by implementing a new intrusion prevention system (IPS) device. In which of the following NIST Risk Management Framework phases does his executive leadership determine that the IPS has provided adequate security protections to the organization?