Which of the following is the MOST important criterion for complete closure of a security incident?
A . Level of potential impact
B . Root-cause analysis and lessons learned
C . Isolation and protection of affected resources
D . Reporting to senior management
Answer: B