Where Incident Response Sits in the CAF Objective D — Minimising the impact of cyber security incidents — is the framework’s answer to the assumption that, eventually, something will get through. Objectives A through C are about prevention and detection; Objective D is about what happens the moment prevention fails, and it splits into two principles:

Source: Cyber Management Alliance