When a Compromise Assessment makes sense

Compromise assessment uses forensic methods to track down attackers in the system and can thus contribute to faster detection of incidents and security incidents. But is this expensive approach also suitable for prevention?