Security

Create incident response plan for this security event:

Incident: [description]
Severity: [level]
Systems affected: [list]
Data at risk: [description]

Provide:
- Immediate containment steps
- Investigation procedures
- Evidence preservation
- Communication plan (internal/external)
- Remediation steps
- Post-incident actions
- Timeline and checklist

Review access controls for [system/application]:

Current setup:
- User roles: [description]
- Permission model: [approach]
- Authentication: [method]

Analyze:
- Principle of least privilege compliance
- Role definitions appropriateness
- Over-privileged accounts
- Inactive accounts
- MFA coverage
- Access review process

Provide findings and remediation plan.