Detection, to ensure that the organisation is aware of internal and external threats and can mitigate them proactively; Response & Recovery, to defend the organisation against cyber attacks and restore operational functionality in case of impact.