Details.
Reviews the incident after closure and addresses the causes. Includes a written post-mortem, prioritised technical fixes, separate process changes, and a twelve-month plan with owners. You get a remediation plan divided into actions for this month and this year.