Remediation

Orchestrated incident response

Lastly comes remediation. Based on the pre-established playbooks, a remediation action is taken – in this case it is to power off the affected instance. All of these actions and event details are logged in the Resilient Security Orchestration, Automation and Response incident record.