RS.MI-01 Incident containment
Containing incidents: automatic containment by security tools, manual containment by responders, containment by an ISP or MSSP and moving compromised endpoints to a remediation VLAN.

Incident Mitigation: containing and eradicating incidents; two Subcategories.
Containing incidents: automatic containment by security tools, manual containment by responders, containment by an ISP or MSSP and moving compromised endpoints to a remediation VLAN.
Eradicating incidents through automatic eradication by security technologies, manual actions by responders or eradication performed by a managed security service provider.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.