CISSP Security & Risk Management-The After-Action Review
- After-action review (AAR): a detailed examination of events that occurred from incident detection to recovery
- Identify areas of the BC/DR plans that worked, didn’t work, or need improvement
- AAR’s are conducted with all participants in attendance
- AAR is recorded for use as a training case
- AAR brings the BCP/DRP teams’ actions to a close
- AAR serves several purposes:
- Documents the lessons learned and generates BC/DR plan improvements
- Is a historical record of events, for possible legal proceedings
- Becomes a case training tool
- Provides closure to the incident
To Become Certified For CISSP Please Visit This Link;
Also published on Medium.
