Which of the following is the MAIN purpose of implementing an incident response process?