You need Detection, Deterrence, and Response — not two out of three.