What is the purpose of a lessons learned review after a security incident?

• A.To analyze the incident response effectiveness, identify improvements for the IR plan, address root causes, and prevent similar incidents from occurring in the future
• B.To confirm the incident was reported to the card brands on time, assign fault to the employee involved, document the disciplinary actions taken, and justify the budget for new tools
• C.To update the cardholder data flow diagram, re-run the quarterly external scan, replace the compromised hardware, and file a new attestation of compliance with the acquirer
• D.To measure how quickly the acquirer responded, rank the card brands by fine size, archive the forensic images, and reduce the scope of the next PCI DSS assessment