The purpose of the Discovery phase is to collect information to identify trends across incidents and exercises. The goal of the collection process is to:

• Evaluate actions taken to correct previous issues.
• Gather information on priority focus areas for leadership.
• Measure effectiveness of new plans, policies, and procedures.
• Validate risk and assess capabilities.

 The Discovery phase consists of two key elements:

• Planning for collection to ensure that information is collected, managed, and shared in a systematic and deliberate manner.
• Collecting data using a variety of methods.