I need help understanding how to craft a lessons learned document that focus on the vulnerability risk assessment process not the assessment itself.

I need help understanding how to craft a lessons learned document that focus on the vulnerability risk assessment process not the assessment itself. What went well, and what could had been done better in the future to ensure the assessment is completed accurately. Basically, how to craft a lessons learned over the process to complete the assessment.