This document:
- Identifies which path to follow based on the disposition assigned: contain, throttle, investigate further, accept as policy-approved, or route to governance.
- Helps CISOs set thresholds, approve containment decisions, and sign off on governance outcomes.
- Helps security analysts carry out the appropriate steps and complete the record fields.
