RS.MI Incident mitigation

Incident Mitigation: containing and eradicating incidents; two Subcategories.

RS.MI-01 Incident containment

Containing incidents: automatic containment by security tools, manual containment by responders, containment by an ISP or MSSP and moving compromised endpoints to a remediation VLAN.

RS.MI-02 Incident eradication

Eradicating incidents through automatic eradication by security technologies, manual actions by responders or eradication performed by a managed security service provider.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.