API 1164 RS.AN-2: RS.AN-2 Incident impact analysed within and beyond the environment where detected, feeding lessons learned

The incident response plan must include processes to analyse an incident's impact on assets within the segmented environment where it was detected and on other segmented environments, and to include impact analysis in lessons learned to reduce the likelihood or impact of future incidents.