CND sounds like a DoD acronym because it is one. A quick look at where the term came from, the NIST definition behind it, and the four-part structure — prevent, react, review, anticipate — worth using
When a breach forces you to choose between stopping attackers fast and protecting the people harmed by the attack, those choices matter more than you think. Ethics isn't a separate step in incident response: it lives inside every technical decision you make.