When it comes to cyber attacks, enterprises have traditionally focused security controls around prevention. Naturally, prevention is the first objective, but recognising that 100% prevention is impossible, security controls in the detection and response groups are receiving increasing consideration.

https://www.computerweekly.com/opinion/Security-Think-Tank-Incident-response-vital-to-guard-against-catastrophic-cyber-attack