When a breach is suspected or detected, incident response provides a full investigation to stop the attack and minimize impact on an organization through proper containment and remediation action.