Which of the following processes would most likely help an organization that has conducted an incident
response exercise to improve performance and identify challenges?


A. Lessons learned
B. Identification
C. Simulation
D. Containment