Response
Response involves taking action to contain, eradicate, and recover from the incident and prevent future incidents. This includes isolating affected systems, removing malware, patching vulnerabilities and implementing security controls to prevent future attacks.