•Restore
Operation
–Allow
system/application owner to have final say in restoring production
service
•Help owner weigh risk
of resuming operation versus benefits
•Monitor the
system
–Ensure system is not
involved in further incidents
–Verify correct
operation of system over time (from
both a security and application standpoint)
•
•