Once they have access, they have gained a “foothold,” and using this foothold the attacker then may move around the network of users at this same lower level, gaining access to information of this similar privilege.[32] Incident response planning allows an organization to establish a series of best practices to stop an intrusion before it ca