In security response, practice makes perfect