Lessons learned

Also written: lessons-learned meeting

The last incident response phase: a review of what happened, which feeds back into preparation.

Where the book teaches it