This lesson explains what cyber defence and incident response mean in practice, covering how organizations move from prevention to active detection and response when security controls are bypassed.