164.308(a)(6)(ii): Response and Reporting

Identify and respond to suspected or known security incidents and mitigate, to the extent practicable, harmful effects.