QuestionQ65Verified/Incident ManagementCopy linkReport a problemAsk AstroTutorSave questionThe PRIMARY goal of conducting a post-incident review is to:Aidentify control improvementsBidentify vulnerabilitiesCre-evaluate the impact of incidentsDidentify the root causeShow AnswerAnswerExplanationA post-incident review captures lessons learned and identifies corrective actions to strengthen security controls and the incident-handling process, reducing the likelihood or impact of similar future incidents. Root-cause identification may be an input to this work, but control improvement is the broader objective.Learn moreNIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk ManagementShow comments10Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion