Which of the following procedures would be performed after the root cause of a security incident has been
identified to help avoid future incidents from occurring?


A. Walk-throughs
B. Lessons learned
C. Attack framework alignment
D. Containment