When should a post-mortem review meeting be held after an intrusion has been properly taken
care of?

A.
Within the first three months after the investigation of the intrusion is completed.

B.
Within the first week after prosecution of intruders have taken place, whether successful or not.

C.
Within the first month after the investigation of the intrusion is completed.

D.
Within the first week of completing the investigation of the intrusion.

Explanation:
As stated in CISSP documentation, you should make post mortem review meetings
after taking care of the intrusion, and no more than one week after the facts. Its not a good
practice to wait more than this time, it’s a matter of common sense too, three months, one month,
2 weeks, its too much time.