SIIM Roadmap
Step 2. Incident analysis and lessons learned ![](https://siim.insecurityinsight.org/wp-content/uploads/Roadmap-Step2-graphic-for-lozenge-1.png)
![](https://siim.insecurityinsight.org/wp-content/uploads/Roadmap-Step2-graphic-blue-circle-sm.png)
After the incident has been analysed, senior management and decision-makers in the organisation should:
- Identify and implement new or improved plans to prevent and prepare for similar incidents in the future.
- Draw up an action plan to ensure that the recommended actions are implemented.
![](https://siim.insecurityinsight.org/wp-content/uploads/Learn-more-sm.png)
Learn more
Consult SIIM Handbook, pages 41, 44 & 45:
Chapter 2, Objective two – Lessons learned and applied: 2.2 Implementing lessons learned & 2.3 Analysis and follow-up actions of sensitive cases.
![](https://siim.insecurityinsight.org/wp-content/uploads/Tools-sm.png)
Consult the following tools
Tool 5 – Incident analysis grids
Tool 8 – Action plan for incident follow-up