Which aspect of the incident management life cycle focuses on documenting the effectiveness of the response, identifying what went well, and what could be improved upon for future incidents?
Remediation
Chain of custody
Incident response plan
Lessons learned