Which of the following steps in incident response procedures entails of the incident and
identification of knowledge gained that can be applied to future handling of incidents?

A.
Recovery procedures

B.
Escalation and notification

C.
Reporting

D.
Lessons learned