What action must be taken in responce to a security incident?

I think you can inventory equipment to determine if any missing and distroyed, and investigate computer/router security log to look for other affected system.