After a company has resolved an incident, the management seeks a report describing what happened to identify changes that would help mitigate future incidents. What kind of report can a company prepare that fulfills this need?

a. Lessons learned
b. Law enforcement report
c. Forensic analysis
d. Regulatory reporting