Incident response
Coordinate outside affected systems.
Create an out-of-band Channel when ordinary organizational communications may be unavailable or in question. M2 gives the response group a separate place for live coordination; retained evidence still belongs in the organization’s approved system of record.