From the course: Incident Response Frameworks

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Lessons learned

Lessons learned

Welcome to this video, Lessons Learned. Picture this, your organisation just survived a major cyber attack. Systems are restored, threats contained, but now what? Do you simply move on, or do you transform this crisis into your greatest learning opportunity? The NIST 800-61 Lessons Learned phase holds the key to making every incident a stepping stone to stronger security. In this video, we'll explore the essential components of Lessons Learned, examine NIST SB 800-61's improvement methodology, analyze post-incident review processes and timing, and describe documentation and feedback loop strategies. By the end of this video, you'll be able to identify Lessons Learned phase key components, NIST 800-61 Continuous Improvement Methodology, analyze post-incident review timing and processes, evaluate documentation requirements for improvement feedback, and apply lessons learned findings to organizational planning. Now that we understand our learning goals, let's explore how to transform…

Contents