I coined a new #IncidentResponse term: ALP - Appropriate Levels of Panic
My job as a #cybersecurity incident responder is built around the zero'th rule of IR: Setting appropriate levels of panic.
A responder's very first (zero'th) job is to make sure that everyone involved with an incident (or adverse event) is aware of the severity, urgency, and potential impact. This sets expectations for the entire party.
Calling this "panic" is a bit silly, but it gets the message across. Sometimes during an incident people involved literally panic. Sometimes those involved don't consider an incident a priority at all.
My job is to make people who need to panic more panic more, and those who need to panic less panic less.
We should all panic the same.
#InformationSecurity