Whenever you're ready, walk me through how you'd approach this.
Tell me about a time you identified a significant security risk before it became an incident. How did you assess the risk, who did you involve, and what actions did you take to reduce it?