Which phase of the incident response process happens immediately following identification?
Reporting
Containment / Mitigation
Eradication / Remediation
Recovery