To prevent an incident from overwhelming resources, _ is necessary.
disconnection from the network
continuation of monitoring for other incidents
early containment
eradication of the issues