What process should be followed first when a cloud resource is compromised?

Identifying the problem is the critical first step when a cloud resource is compromised. This process involves determining the nature and extent of the compromise to understand what has occurred and the potential impact on the system. By identifying the specific issue, such as whether it is a security breach, data leak, or system failure, the response can be tailored accordingly.

Once the problem is identified, further actions can be taken effectively. For example, understanding the exact nature of the compromise allows for accurate documentation of findings and outcomes, which is essential for compliance and future prevention efforts. This identification also serves as a basis for establishing a plan of action, as the response would vary significantly depending on whether a denial-of-service attack, unauthorized access, or data corruption is at play.

In summary, recognizing the specific details of the compromise lays the groundwork for all subsequent actions, making it a crucial first step in responding to cloud resource incidents.