In what phase of an incident management process will malware antivirus signatures be distributed to...

Comprehensive and Detailed Explanation (250–350 words) From Exact Extract from Chief Information Security Officer (CCISO) Documents:

The CCISO incident management lifecycle defines eradication as the phase in which malicious artifacts are removed and corrective actions are applied to prevent reinfection. This includes patching systems, removing malware, and distributing updated antivirus signatures.

CCISO guidance explains that containment focuses on limiting spread, collection focuses on evidence gathering, and distribution is not a formal incident phase. Antivirus signature updates are corrective measures designed to eliminate threats and prevent recurrence, making eradication the correct phase.