Respond to security incidents with a clear process. Trigger: incident response, IR, containment, forensics.