A strong cybersecurity program is intended to defend against attacks by limiting exposure to threats, but nothing is completely impenetrable. Sometimes attacks are successful, and efforts must shift gears to assess, investigate, and contain the attack to minimize damage.
