Performing a risk assessment and confirming a possible

exploit type

Monitoring the environment and examining code

Running a penetration test and running a vulnerability scan

Taking the environment offline and restoring from backups