Whether you conducted a simulation or experienced a real-life cyberattack, it's crucial to assess how well you performed in your incident response. By evaluating and grading your IR, you can identity weaknesses and hopefully smooth over any rough patches in your response. This session will explain the value of IR post-mortems and present recommendations on how to optimally perform them in order to get meaningful insights.