That's the job of an external cyber incident response team who can trace how it occurred and to check that the vulnerability has been appropriately eradicated a

That's the job of an external cyber incident response team who can trace how it occurred and to check that the vulnerability has been appropriately eradicated and locked before resuming business operations