
Supported components
Keep important software supported and test updates. Inventory dependencies so abandoned components are not silently left in production. Explain which task matters next and why it takes priority.
Preserve relevant evidence, contain the issue, and assess affected data and functions. Recovery should address the cause rather than restore an infected copy. Agree whether the evidence supports keeping, changing, or stopping the approach.
- A written brief
- Named responsibilities
- Agreed review points




