incident response preparation ironically, one of the most important phases of the incident response lifecycle (chapter 41, page 605) is preparation. by taking a strategic approach to thoughtful planning and preparation we can ensure we have a comprehensive and methodical approach for responding to a serious incident or conducting an investigation. with that in mind, please share your thoughts on why preparation is important and what we should look to achieve. what should we focus on and what do we need to do to prepare in advance?