The PRIMARY goal of a post-incident review should be to:

determine why the incident occurred. 

determine how to improve the incident handling process. 

identify policy changes to prevent a recurrence. 

establish the cost of the incident to the business.