0 / 60 seg.

Which phase of the incident response process happens immediately following identification?