Câu 93: CS0-003: CompTIA CySA+ (CS0-003)

An incident response team finished responding to a significant security incident. The management team has asked the lead analyst to provide an after-action report that includes lessons learned. Which of the following is the most likely reason to include lessons learned?

1. A. To satisfy regulatory requirements for incident reporting
2. B. To hold other departments accountable
3. C. To identify areas of improvement in the incident response process — đáp án hiện tại
4. D. To highlight the notable practices of the organization's incident response team