This policy establishes guidelines and procedures your organization can follow when your computer network is compromised ... an intrusion detection team, log retention, and more.