When multiple Internet intrusions on a server are detected, the PRIMARY concern of the information security manager should be to ensure:
the integrity of evidence is preserved.
forensic investigation software is loaded on the server.
the incident is reported to senior management.
the server is unplugged from power.
Submit