DeftTrust

← Controls

IS-07:IR-04

Post-incident review conducted; lessons learned documented

Status
Event-driven
Policy cadence
Event-driven
Last evidence
Next due
Owner
CTO / Incident Commander
TSC
CC7.5
Evidence folder
05_Incident_Response
Automatable
No — human judgement
Policy
IS-07
Policy version
v4 (2026-03-26)
Not automatable. DeftTrust schedules this control, prepares the pack and files the record it produces — it does not perform the judgement. The calendar still tracks it, so it cannot silently lapse.

Collectors

CollectorRelationshipSamplesWhat it observes
No collector references this control yet.

Evidence satisfying this control

CollectedCollectorResultSourceDigest
No artifact satisfies this control.