Which intended outcome most directly relates to Detect?

### Why this is right Detect concerns finding attacks and other security events. An intrusion detection system monitors activity for signs that may indicate an attack, so rapid detection is directly within this area. ### The concept Detection also includes monitoring security configurations, using threat intelligence, testing defences, and improving the processes used to identify problems. It is distinct from protecting data before an event and recovering systems after an incident. ### The other options - **B. All staff can classify sensitive data**: this is a Protect outcome because it supports safe information handling. - **C. Roles and responsibilities are clearly defined**: this belongs to governance and Identify and Manage. - **D. Mission-critical systems have tested recovery plans**: this is a Recover outcome. ### Terms - **Intrusion detection system**: a system that monitors activity to identify possible unauthorised access or other suspicious behaviour. - **Mission-critical**: necessary for an organisation to perform important operations. ### Remember Detect finds indications of trouble; Protect reduces exposure; Recover restores operations.