Prepare, detect, contain, and recover from security incidents—with realistic scope for small teams and tool users.