Which item is a step in the post-incident process?

• A. Who did wrong?
• B. Why was it wrong?
• C. What discipline is required?
• D. Who performed what actions at incident

Answer: (D)

Post-incident analysis focuses on reconstructing what happened during the incident so you can learn and prevent recurrence. A central step is documenting exactly who performed which actions at the incident and when those actions occurred. This creates a clear timeline, shows accountability, and helps identify where procedures worked, where gaps existed, and what training or changes are needed. With that information, the team can evaluate response effectiveness and update plans accordingly.

The other ideas don’t fit as well because they shift the focus toward blame, why the event happened in a moral or root-cause sense, or what discipline is needed, rather than recording the actual actions taken during the incident that drive the after-action discussion and improvements.