Q36
Single choice
Which countermeasure should be taken during the preparation phase of the incident response lifecycle?