Systems undergoing quarantine due to security alerts must always be disconnected from the network and powered off until further analysis is complete.
Systems undergoing quarantine must always be powered off
Systems undergoing quarantine should be network isolated but not necessarily powered off