Which of the following items represents a document that includes detailed information on when an incident was detected, how impactful the incident was, and how it was remediated, in addition to incident response effectiveness and any identified gaps needing improvement?
A.
Forensic analysis report
B.
Chain of custody report
C.
Trends analysis report
D.
Lessons learned report
Explanation:
Answer is D.
The lessons learned report provides you with the details of the incident, its severity, the remediation method, and most importantly how effective your response was. Additionally, it provides recommendations for improvements in the future. A forensic analysis report would not provide recommendations for future improvements, even though it provides many of the other details.
11
0