“To competently perform rectifying security service, two critical incident response elements are necessary: information and organization.”