The incident response team has turned the evidence over to the forensic team. Now, it is the time
to begin looking for the ways to improve the incident response process for next time. What are the
typical areas for improvement? Each correct answer represents a complete solution. Choose all
that apply.

A.
Information dissemination policy

B.
Electronic monitoring statement

C.
Additional personnel security controls

D.
Incident response plan