Assistance / removal of security threats (e.g. viruses, worms) and removal from the computing environment - Coordination of activities with other service groups for the purposes of security remediation - Disconnecting infected machines from the network (if required) - Applying recommended fixes and/or patches (if required) - Rebuilding machines (if required)