Crisis management
A major incident stops being a technical problem within hours.
Regulators with deadlines, customers wanting answers, insurers with requirements, lawyers with views on what may be said, journalists with a story either way. The technical team is one input among several, and organisations that treat a serious breach purely as an engineering exercise are surprised by how much of it is not.
Checked against the primary source.
