Pre-incident checksSentinel register and advisory watch, before any incident No open incident Monitor Sentinel coverage Risk flags 1How an incident is handled