During which phase of an incident response process should corrective actions to the response procedure be considered and implemented?

{} [+]