Following a widespread malware outbreak that forced a shutdown of multiple systems, the incident response team has completed eradication and validated that all affected hosts are clean. The information security manager must now guide the recovery phase. Several business units are demanding immediate restoration of their applications. What should PRIMARILY determine the sequence in which systems are brought back online?