Ongoing Incident

  1. Don't power down anything. Forensic data might be lost.

  2. Isolate impacted systems. Logically disconnect, or unplug network cables strategically to block off the problem.

  3. Fill out and submit this form.

  4. If you have one, dust off your incident response plan.

  5. Take a breath. Remember that cooler heads prevail during a crisis.