Which of the following is the phase in the incident response process when a security analyst reviews roles and
responsibilities?


A. Preparation
B. Recovery
C. Lessons learned
D. Analysis