Incidents, especially security incidents, get a lot of attention.
That attention creates pressure to perform. In turn, we focus on prevention, speed of detection, and appropriateness of response. In that process, then, how do you actually respond to the incident? How automated is your response? How long does it take to rally the team and get moving in the right direction?
Leave a reply
