Cleanup is complete, and the few exposed customers and staff have been located and are undergoing treatment. The operation is now shifting to an ongoing investigation of the disgruntled former employee.
Which resources would you demobilize and why?