20
Marty Gillespie (mgg@dnaco.net)
Containment I
•Assign a team to handle the incident
–Limit access to those handling the incident
–Bring all team members up to speed on all aspects of the incident. This includes things that may be considered irrelevant