To prevent an incident from overwhelming resources, _ is necessary.
eradication of the issues
continuation of monitoring for other incidents
early containment
disconnection from the network