Once an incident or issue is detected, an organization should respond appropriately by investigating issue, conducting appropriate fact finding, and  remediating and improving the system.  Issues may be minor (e.g., a policy is misunderstood) or serious (e.g., potential criminal activity or issues with potential legal implications) or even crisis related (e.g., physical catastrophe). In any event, issues should be tracked and legally processed and resolved.  Costs associated with issue resolution should be tracked and management should identify true root cause rather than treating symptoms.

System should be improved to avoid repeat incidents or issues.