Crisis management

A major incident stops being a technical problem within hours.

Regulators with deadlines, customers wanting answers, insurers with requirements, lawyers with views on what may be said, journalists with a story either way. The technical team is one input among several, and organisations that treat a serious breach purely as an engineering exercise are surprised by how much of it is not.

Checked against the primary source.

More on Incident response