During a ransomware incident, the incident response team isolates affected systems. Which of the following is the NEXT best step?
Select one:
ISC2 often tests the misconception that containment (isolation) is the final step, but the trap here...