Which of the following incident response procedures would he need to perform in order to begin the analysis?
Which of the following concepts is BEST described as developing a new chain of command in the event of a contingency?