Preventing incidents is one of the most important functions of an enterprise information security team, but having a strong security incident response process is also important. Even the