A security team is developing a set of documented procedures for responding to a cyberattack. They are unsure whether a runbook or playbook is more appropriate.

Which of the following scenarios best describes the MOST suitable use case for a runbook?

A high$-$level decision tree for escalating a security incident based on its severity

A step$-$by$-$step guide for restoring a critical server after a hardware failure

An overarching strategy outlining the general steps for responding to a ransomware attack

A detailed checklist for patching a specific software vulnerability.