Which of the following steps in incident response procedures entails of the incident and identification of
knowledge gained that can be applied to future handling of incidents?

A.
Recovery procedures

B.
Escalation and notification

C.
Reporting

D.
Lessons learned