Following the successful response to a data-leakage incident, the incident team lead facilitates an exercise that focuses on continuous improvement of the organization's incident response capabilities. Which of the following activities has the incident team lead executed?
A) Lessons learned review
B) Root cause analysis
C) Incident audit
D) Corrective action exercise

Question

Quizplus · Accepted Answer

The incident team lead has executed a "Lessons learned review," which is an exercise aimed at identifying areas for improvement in incident response capabilities after an incident has been resolved.

Following the Successful Response to a Data-Leakage Incident, the Incident