Reflection

follow-up postmortem analysis to document the incident, evaluate its handling, determine what further actions needed.
plan remedies to prevent recurrence.
determine business impact of the incident.
organize documentation for legal/disciplinary action.
lessons learned

review processes and make necessary fixes using this actual incident with real losses as feedback.
--risk analysis: quality of it tested by incident's losses
--business impact analysis: quality of it tested by incident's losses
--emergency response
--business recovery program

External followup of perception of the incident:
--PR people to the news media.
--legal dept. involved with law enforcement