An immediate and thorough response to an Information Security incident is required by legislation and by the UMS Information Security Policy and Standards (Section 10).  The primary purpose of incident response is to reduce the impact of the incident through protecting the information resources from further unauthorized access, mitigating the effects of the incident, and fulfilling legal and regulatory obligations.