Detection closes the first gap, but impact still has to be translated into business meaning. Teams must decide what the data was, who it belonged to, where else it existed, and whether exposure triggers legal or customer obligations. When that information is spread across systems, containment becomes fast while closure remains slow.