which one?

All of these are phases of the Security Incident Response methodology except which one?

A.
planning

B.
preparation

C.
identification

D.
classification

E.
reaction

F.
restructuring

G.
post-mortem