Today’s SY0-701 CompTIA Security+ Pop Quiz: Cold pillow

An organization has recently recovered from a security incident. Which of the following would be the next step in the incident response process?