$2.$ What do you do about $3$rd party components on the network? In other words $$

a$.$ How do you identify unpatched hardware or software on the network?

b$.$ What does incident response $($notification$)$ look like? $($Describe a business process & provide a reference$)$

c$.$ How do you take action on something you don$$t own on the network? $($Describe a business process & provide a reference$)$