Log an incident, contain it, trace it back to the control that let it through, remediate, and close once the loop is proven closed.