How would you implement logging and alerting so that security incidents are detected quickly and accurately at Cisco?