SIIM Roadmap
Step 2. Incident analysis and lessons learned 
After the incident has been analysed, senior management and decision-makers in the organisation should:
- Identify and implement new or improved plans to prevent and prepare for similar incidents in the future.
- Draw up an action plan to ensure that the recommended actions are implemented.
Learn more
Consult SIIM Handbook, pages 41, 44 & 45:
Chapter 2, Objective two – Lessons learned and applied: 2.2 Implementing lessons learned & 2.3 Analysis and follow-up actions of sensitive cases.
Consult the following tools
Tool 5 – Incident analysis grids
Tool 8 – Action plan for incident follow-up
SIIM Handbook
Classification of incidents
Tools and Resources