A security team conducts a lessons-learned meeting after struggling to determine who should conduct the next steps following a security event. Which of the foll...