• After-action review (AAR): a detailed examination of events that occurred from incident detection to recovery
• Identify areas of the BC/DR plans that worked, didn’t work, or need improvement
• AAR’s are conducted with all participants in attendance
• AAR is recorded for use as a training case
• AAR brings the BCP/DRP teams’ actions to a close

• AAR serves several purposes:
  • Documents the lessons learned and generates BC/DR plan improvements
  • Is a historical record of events, for possible legal proceedings
  • Becomes a case training tool
  • Provides closure to the incident

To Become Certified For CISSP Please Visit This Link;

Also published on Medium.