Threat prevention, threat detection, and threat recovery in a company?

How does threat prevention, threat detection, and threat recovery work together to protect a company from failure? What are some specific methods companies use to implement each of these?