Figure 1: The bathtub curve In the first phase we see a standard Ad-Hoc approach to incident handling and response activities which leads to delays in remediating attacks. Gradually over time as more ...