Post-Incident Review & Lessons Learned
Conduct Review: Within 2 weeks post-incident.
Activities:
Root cause analysis.
Identify gaps in detection, response, and recovery.
Update policies, procedures, and controls.
Conduct targeted staff training if required.
Documentation: Update incident records and lessons learned log.
Root Cause Analysis template
Lessons Learned template
Last updated