19
Marty Gillespie (mgg@dnaco.net)
Phase
3: Containment
–The goal of the
Containment phase is to limit the scope of an incident
–Keep the problem from
getting worse
•Limit the number of
systems the incident effects
•During this phase,
modification of the system begins