The CSIRT team is following the existing recovery plans on non-production systems in a PRE-BREACH
scenario. This action is being executed in which function?
Protect
Recover
Identify
Respond
Submit