Category steps analyze security incident