Response Process

• Plan next steps

  • Engage law enforcement?

  • Activate DR plan?

  • Does notification law apply?

  • Locate backups

  • Flatten/Rebuild OR Fix?

  • Get management & ISO signoff