What is it? - Skilled Staff + Software + Procedures - You need all 3 - software for visibility - procedures in a playbook - people that understand what the software is saying and can implement the procedures to maintain CIA
Why is it important
What if you dont have all 3 sides?