In the NIST incident response life cycle, training the team, building tools, and creating playbooks occur in which phase?

Pick an option to reveal the answer.