CompTIA CySA+ CS0-003 Practice Question
After an extensive incident response process, your team has successfully contained and eradicated a malware outbreak in your organization's network. What should be included in the lessons learned meeting to prevent similar incidents in the future?
Finalize new policies disregarding lessons learned since the incident is resolved.
Blame individual team members for any mistakes made during the incident response.
Consider turning off all affected systems to help ensure the malware is eradicated.
Review the incident timeline to understand the sequence of events.