The objective [of incident readiness] is to limit the damage of the security incident and reduce recovery time and costs.*  These outcomes are well worth an investment in readiness. Take the first step by getting a clear picture of current capabilities and security gaps, especially those not spotted by your staff. The longer gaps exist, the greater the risk they’ll be exploited.