Incident response

The first 30 minutes of an incident ↗

Preserve evidence, establish ownership, and make the next decision easier with a repeatable triage plan.