Which aspect of the incident management life cycle focuses on documenting the effectiveness of the response, identifying what went well, and what could be improved upon for future incidents?
Incident response plan
Remediation
Lessons learned
Chain of custody