Help! We have an Incident!
If you discover an IT security breach that is threatening your business you need to act fast to protect your valuable data, prevent further loss and to preserve evidence.
The basic rule is the less you touch it, the easier a subsequent forensic investigation will be.
Consider where good evidence may be found; this may include removable and hand-held devices and your back up tapes.
If possible, quarantine what you can and seek immediate advice.