Watch this video on YouTube
What is the most critical aspect to document when evaluating the effectiveness of an incident response?