The organizational CP philosophy for incident response and digital forensics that focuses on the defense of information assets and preventing reoccurrence rather than the attacker’s identification and prosecution.