MENTAL MODEL · M6753

PDRR

BusinessmediumManagement

Included

Updated 2026-08-13

Loading revision record…

INTRODUCTION

English translation pending.

CORE DEFINITION

PDRR is a layered security model with four functions. Protection covers preventive measures such as firewalls, access controls, and encryption. Detection covers monitoring and intrusion detection that reveal when prevention has failed. Response covers the procedures for containing and investigating an incident, including isolation and evidence preservation. Recovery covers restoring normal operation, including backups and continuity plans. The model's premise is that no protection is complete, so a security program must assume breach and invest in the later layers as well.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

- Use prevention inventory: list the controls that block or slow an attack before it succeeds. - Use detection design: specify what would reveal a breach that prevention missed and who receives the alert. - Use recovery rehearsal: test restoration from backup rather than assuming it works.

anchor

Anchor fast decisions

Any single control can be defeated, so a program that invests only in prevention has no capacity to respond once the control fails, and the failure is often silent. Adding detection turns a successful intrusion into a visible event, which makes response possible. Response limits the damage while it is happening, and recovery returns the organization to operation. The layers are complementary rather than redundant: each covers the failure mode of the one before it, so investing in only one leaves a gap the others cannot fill.

MINIMUM ACTION

In progress 0/1

Practice this model in one real situation:

List the preventive controls that block or slow an attack. 2. Deploy monitoring that reveals a breach prevention failed to stop. 3. Write an incident response procedure covering isolation and evidence. 4. Prepare a backup restoration plan and test that it works. 5. Rehearse the full sequence so each layer is exercised.

Check to track your progress (stored locally)

Learning progress0%

account_treeGenealogyexpand_more

menu_bookReferencesexpand_more

Source support: Explicit

link
kepuchina.cnhttps://www.kepuchina.cn/article/articleinfo?business_type=100&classify=0&ar_id=365970ZH · Explicit
verified

RELATED MODELS