After a security incident, management is meeting with involved employees to document the incident and its aftermath. Which of the following BEST describes this phase of the incident response process?

Question

Quizplus · Accepted Answer

This phase is known as "Lessons learned," where the incident is reviewed to understand what happened, what was done well, and what could be improved for future incidents.

After a Security Incident, Management Is Meeting with Involved Employees