Question 363:
After a security incident, management is meeting with involved employees to document the incident and its aftermath. Which of the following BEST describes this phase of the incident response process?
Answer options:
A. Lessons learned B. Recovery C. Identification D. Preparation