A playbook directs responders to block an entire partner network, but the partner also supports emergency operations. What should be evaluated?

Published
  1. Abandon containment in every circumstance
  2. Change the incident severity to low to avoid the decision
  3. Apply the broad block without considering the known dependency
  4. Containment options and business dependencies under the approved authority

Comments — 0