Given a scenario where a system has been compromised, what steps would you take to mitigate the damage?