You are the security officer for a mid-sized company and are developing an incident response plan (IRP). Which key element should be included in the preparation phase of your IRP?
Root cause analysis
Incident response team roles and responsibilities
Developing forensic analysis procedures
Lessons learned