A tabletop exercise reveals nobody can authorize isolating a critical host. What should be improved?

1. Documented incident roles and decision authority
2. The public marketing slogan
3. Only the host's wallpaper
4. Removal of the isolation capability