The post-incident review, also called lessons learned or an after-action review, is the last phase of incident response and one of the most valuable. Its purpose is to improve: to find what worked, what did not, and what should change so that similar incidents are less likely or less harmful in future. An incident is expensive; the review is how the organization gets some value back from that cost.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.