You need a strategy for handling intrusions effectively that includes preparation, detection, and response. The practices in this module identify steps you must take to respond to and recover from a detected intrusion.