In which phase of the incident response process should an organization ideally implement appropriate controls to reduce the likelihood of a security incident?

A $0$ Containment, eradication, and recovery

B Preparation

C Detection and analysis

D $$ Post$-$incident activity