Principles of Information Security (MindTap Course List)
Principles of Information Security (MindTap Course List)
6th Edition
ISBN: 9781337102063
Author: Michael E. Whitman, Herbert J. Mattord
Publisher: Cengage Learning
bartleby

Concept explainers

Expert Solution & Answer
Book Icon
Chapter 4, Problem 19RQ

Explanation of Solution

After-action review (AAR):

  • AAR is a structure review or de-briefing process for analyzing “what” happened, “why” happened and “how” it can be finished by the members and who are responsible for the action or project.
  • It is a detailed examination and discussion of the events that happened from first detection to final recovery.
  • This is normally performed in the incident response process.
  • IR (Incident Response) consists of four phases; detection, recovery, planning, and reaction...

Blurred answer
Students have asked these similar questions
What are the benefits of having an audit trail?
What is a mock-up report, and how does it work?
What is the significance of Auditing and Log Collection
Knowledge Booster
Background pattern image
Computer Science
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
Recommended textbooks for you
Text book image
Principles of Information Security (MindTap Cours...
Computer Science
ISBN:9781337102063
Author:Michael E. Whitman, Herbert J. Mattord
Publisher:Cengage Learning
Text book image
Management Of Information Security
Computer Science
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:Cengage Learning,
Text book image
Fundamentals of Information Systems
Computer Science
ISBN:9781305082168
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning
Text book image
Principles of Information Systems (MindTap Course...
Computer Science
ISBN:9781285867168
Author:Ralph Stair, George Reynolds
Publisher:Cengage Learning