syldra summed out our response:
Analyze -> identify -> mitigate -> resolve -> analyze, documenting each steps if relevant (usually is)... Depending on the causes and mitigation/solution, it falls to different teams to take the actions needed
I'm not personally involved with the process unless logs are needed.