What is a post-incident review?

• A. A formal evaluation after an incident to identify lessons learned, improvements, and corrective actions.
• B. A casual team huddle to discuss the incident.
• C. A public press release about the incident.
• D. A finalized incident report only for management.

Answer: (A)

Post-incident review is a formal evaluation conducted after an incident to capture what happened, why it happened, and what can be done to prevent recurrence. The aim is to identify lessons learned, improvements needed across people, processes, and technology, and to assign corrective actions with clear owners and deadlines. This makes the incident a driver for concrete changes rather than a one-off discussion. Casual team huddles, public press releases, or a finalized management-only report don’t systematically capture lessons, assign actionable fixes, or involve the necessary stakeholders, so they don’t fit the purpose of a post-incident review.