Intrusion Containment

In the event of a break-in, the team shall perform as many actions as possible to contact local police. If authorities arrive and detain the attacker before they access sensitive investor information, then an incident may be reported but immediately closed given the retainment of all physical media. In any case, the team should attain a police report to document the incident.