Incident Response Protocol - Northwestern University

A1. Disconnect the system or appliance from the network or access to other systems. A2. Isolate the affected IP address from the network. A3. Power off the appliance(s), if unable to otherwise isolate. A4. Disable the affected application(s). A5. Discontinue or disable remote access. A6. Stop services or close ports that are contributing to the ... ................
................