There are sensors and beacons across all your sites monitoring activity and performance. An alert has come through that external actors have penetrated these systems and data has been stolen. Do you shut off these devices and just move on? Do you call your breach coach? Or just hide under the table?
The breach has happened but the real damage is yet to be seen. Show us what you got to avert a damaging situation.