Which containment strategy is most appropriate when an organization cannot afford any business disruption during an active incident?
-
A
Hard shutdown of all affected systems
-
B
Short-term containment with monitoring while maintaining operations
-
C
Full network segmentation and isolation
-
D
Immediate data destruction to prevent further breach