Understand - By understanding the threats that face your organization, you can begin to identify the processes and steps you need to undertake to successfully survive an incident.