Glossary: Incident Response and Resilience

lessons learned

Also written: lessons-learned meeting

The last incident response phase: a blameless meeting, usually within two weeks, and a short report whose actions improve preparation for next time.