Complexity is the enemy of security! This is especially true in crisis! When responding to a cybersecurity incident, you need a simple, effective, repeatable plan. In this session, we'll discuss your "tactical IR" plan, outline your two most important IR playbooks, review your two most critical IT assets (identity and endpoint), and step through a technical workflow for rapid incident investigations.