The process of documenting and analyzing security incidents for improvement is called Post-Incident Review.
- True
- False
Answer: True
Post-incident review captures lessons learned: what happened, response effectiveness, root causes, improvements. Critical for continuous security program maturity.