Architecture lab

Incident Triage: defend the architecture.

Seven situations. Every decision changes residual risk, service availability and the evidence preserved for investigation. There are no vendor magic buttons.