Legal authorities notify a company that its network has been

compromised for the second time in two years. The investigation shows the attackers were able to use the same vulnerability on different systems in both attacks. Which of the following would have allowed the security team to use historical information to p

rotect against the second attack?

A. Key risk indicators

B. Lessons learned

C. Recovery point objectives

D. Tabletop exercise