Which of the following should be notified for lessons learned?

An incident response team detected malicious software that could have gained access to credit card data. The incident response team was able to mitigate significant damage and implement corrective actions. By having incident response mechanisms in place.

Which of the following should be notified for lessons learned?
A . The human resources department
B . Customers
C . Company leadership
D . The legal team

View Answer

Answer: C

Explanation:

Lessons learned is a critical stage of incident response that involves evaluating the effectiveness of the response, identifying gaps and areas for improvement, and updating the incident response plan accordingly1. Company leadership should be involved in this process to ensure they are aware of the incident, its impact, and the actions taken to prevent or mitigate future incidents. Additionally,

company leadership can provide support and guidance for implementing the recommendations from the lessons learned session2.