OCSP stapling: OCSP stapling enables the server, rather than the client, to make the request to the OCSP responder. The server staples the OCSP response to the certificate and returns it to the client during the TLS handshake. This approach enables the presenter of the certificate, rather than the issuing CA, to bear the resource cost of providing OCSP responses. It also enables the server to cache the OCSP responses and supply them to all clients. This significantly reduces the load on the OCSP responder because the response can be cached and periodically refreshed by the server rather than by each client.
Reference: https://www.sciencedirect.com/topics/computer-science/revoke-certificate

Stop the data exfiltration and sever all malicious traffic first, and then clean up the internal mess.

https://owasp.org/www-pdf-archive/OWASP_SCP_Quick_Reference_Guide_v2.pdf And provides actionable guidance for developing code in the following critical areas:
* Input Validation

Data controller. The individual or organization determining what personal data to collect and how it will be used.
Data processors. The individual or organization processing personal data for the controller.

Real-time replication ensures that data is continuously mirrored to the DR site, minimizing data loss to within the recovery point objective (RPO) of 30 minutes.