Control: ism-1731; Revision: 0; Updated: Dec-21; Applicability: ALL; Essential Eight: N/A ​

Planning and coordination of intrusion remediation activities are conducted on a separate system to that which has been compromised.