which of the following Incident Response procedures?

The first responder to an incident has been asked to provide an after action report. This supports which of the following Incident Response procedures?

A.
Incident identification

B.
Mitigation

C.
Lessons learned

D.
Escalation/Notification