Analyzing incidents and drawing lessons from them should be an integral part of the incident response process. This can help improve the overall security level of a company.