The goal is for the company to take a proactive stance on detecting and responding to security incidents, unauthorized access attempts, policy violations, and other abnormal or suspicious activities that may pose a risk to the organization's information assets.