Q37
Single choice
According to NIST, at which step of the incident response process should an organization apply lessons learned from practice?