Chuck is a security analyst. Last month, he derived some objectives and a draft process from the organization's Remote Access policy. He then wrote a specification document. For a week following that, Chuck installed and configured hardware and software necessary to meet the specification. Finally, Chuck has been measuring the effectiveness of the process, comparing his findings against the plan. In relation to the Deming cycle, what step has Chuck not completed