5 LESSONS LEARNED AS INCIDENT COMMANDER OF THE BIGGEST SECURITY INCIDENT OF MY CAREER

Summary from the TLDR InfoSec newsletter

Ryan Cox shares lessons from leading the incident response for a high-stakes incident that stretched about a month. Cox stresses the importance of proactively establishing interdepartmental relationships so that during an incident, you have SMEs that you can rely upon. Cox also reminds incident commanders to avoid diving too deeply into tasks and losing the big picture. Lastly, Cox stresses the importance of having scalable processes around documentation and other often forgotten topics and conducting post-mortem root-cause analysis.