Posted filed under CISSP.


  • After-action review (AAR): a detailed examination of events that occurred from incident detection to recovery
  • Identify areas of the BC/DR plans that worked, didn’t work, or need improvement
  • AAR’s are conducted with all participants in attendance
  • AAR is recorded for use as a training case
  • AAR brings the BCP/DRP teams’ actions to a close

  • AAR serves several purposes:
    • Documents the lessons learned and generates BC/DR plan improvements
    • Is a historical record of events, for possible legal proceedings
    • Becomes a case training tool
    • Provides closure to the incident





To Become Certified For CISSP Please Visit This Link;

Also published on Medium.

Comments are closed.