The incident response team is conducting a scope and impact analysis to determine the extent of the damage. They identify the affected systems, the encrypted data, and the potential impact on business operations.

What would a scope and impact analysis provide for the company's incident response and management team?

To prevent future incidents by implementing security controls and measures.

To determine the extent of the damage and identify affected systems and data.

To develop a plan to restore the affected systems to their pre$-$incident state.

To educate employees on how to prevent and respond to cybersecurity incidents.