CompTIA CySA+ CS0-003 Practice Question
Which aspect of the incident management life cycle focuses on documenting the effectiveness of the response, identifying what went well, and what could be improved upon for future incidents?
Remediation
Chain of custody
Lessons learned
Incident response plan