Incident response (IR) is about more than just having the right playbooks and tools—it’s about building a resilient team that can function effectively under pressure. In this session, I’ll focus on the human side of incident response, discussing team dynamics, leadership, communication, and continuous training. I’ll share stories from my own experience in managing high-pressure incident response situations, including both successes and failures, and what contributed to each outcome.

We’ll discuss the importance of cross-team collaboration, training exercises (e.g., tabletop exercises), and how to cultivate a culture of readiness. I’ll also cover the role of leadership in incident response, particularly how leaders can manage communication, decision-making, and team morale during a crisis.

Attendees will leave with actionable advice on building and maintaining a resilient IR team, as well as best practices for continuously refining incident response processes and team readiness.

You will learn:

• How team dynamics and effective leadership significantly impact incident response outcomes beyond technical capabilities and playbooks
• Practical methods for implementing cross-team training exercises that prepare your organization to maintain composure and make sound decisions during security crises
• Communication strategies that maintain team cohesion, support clear decision-making, and preserve morale during high-pressure security incidents