A cybersecurity incident faces a dilemma of an appropriate investigation. Private investigators (incident responders) may work differently on various matters, whereas public investigators (law enforcement agents) are only concerned with public safety and criminal law. Although they sometimes work together, their duties and processes differ. Practitioners have a broader view of incident response. The talk will enhance information security capacity from the following benefits: (1) Early detection and repair of potential risks, (2) Deploy information security protection software against potential threats, (3) Continuous monitoring of vulnerabilities and threats, and (4) Quickly determine the scope of damage and respond.