thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Lessons Learned

A review conducted after an incident to identify what happened, what worked, what failed and how to improve.

Definition

Lessons-learned meetings involve all parties and address questions such as what occurred and when, how well staff and procedures performed, what information was needed sooner and what should change. Outputs update plans, controls and training.

Example

After a BEC incident, adding a payment-change callback requirement.

Exam tip

Lessons learned feeds back into preparation, closing the lifecycle loop.

Related terms