While not every attack can be prevented, an organization's IR stance should emphasize anticipation, agility, and adaptation, says Chris Morales, head of security analytics at Vectra.