Every organization needs a prevention strategy. Every organization needs a response plan. Every organization needs documentation of compliance.