When dealing with an incident, the incident response team must conduct an after-action review.
The after-motion assessment is a detailed examination of the events that passed off from the first detection to final healing. All group contributors overview their actions in the course of the incident and pick out regions wherein the IR plan labored, failed to paint, or have to enhance.
To expand a contingency plan, first, conduct a hazard evaluation: become aware of your enterprise-important operations, pick out the threats to the operations of the one, and analyze the capability effect of each chance.
Learn more about incidents here https://brainly.com/question/13071753
#SPJ4
