Post-Incident Review & Lessons Learned

• Conduct Review: Within 2 weeks post-incident.

• Activities:

  • Root cause analysis.

  • Identify gaps in detection, response, and recovery.

  • Update policies, procedures, and controls.

  • Conduct targeted staff training if required.

• Documentation: Update incident records and lessons learned log.

Root Cause Analysis template

Root Cause Analysis template

Lessons Learned template

Lessons Learned template