SANS Incident Handler's Handbook and PICERL Methodology
Lessons Learned
SANS Incident Handler's Handbook and PICERL Methodology PICERL-L-03: Lessons Learned: Metrics and Reporting to Executives
Report incident metrics including dwell time, mean time to detect, mean time to contain, mean time to recover, financial impact, and lessons trend analysis to executive risk committees.