Incident Containment is the process by which the CSIRT acts to limit the scale and scope of an incident as it begins to regain control over the organization’s information assets.
Step-by-step explanation:
Incident containment is a process or a function that is used in the computer, forensic and crime department. This function aids to prevent any tampering of evidence or proofs that are vital in legal proceedings to prove someone guilty.
The CSIRT which is the computer security incident response team uses this technique of Incident Containment to manage the cyber security and prevent any crime that can be done through the internet. The CSIRT takes control over the situation using this function.