____ is the process by which the csirt acts to limit the scale and scope of an incident as it begins to regain control over the organization s information assets.