Step 2. Incident analysis and lessons learned
After the incident has been analysed, senior management and decision-makers in the organisation should:
- Identify and implement new or improved plans to prevent and prepare for similar incidents in the future.
- Draw up an action plan to ensure that the recommended actions are implemented.
Consult SIIM Handbook, pages 41, 44 & 45:
Chapter 2, Objective two – Lessons learned and applied: 2.2 Implementing lessons learned & 2.3 Analysis and follow-up actions of sensitive cases.