Monitors and notifies about unauthorized changes to critical system files, processes, and ports to detect security threats and system incompatibilities.

Develops and manages plans and processes to respond to and recover from security incidents, minimizing impact and restoring operations.