Question

Why is it a good idea to have a security policy that defines the incident response process in your organization

Answer 1

so that people know what step to take, and what steps will be taken in the event of an incident..... The post-mortem, lessons learned step is the last in the incident response progress.