The decision at the center

Who makes the next critical decision when the facts are incomplete and the business is affected?

The conversation

The session makes the leadership side of incident response concrete. It follows the handoffs from technical signals to business impact, containment authority, external communication, and acceptance of recovery.

What the audience can take away

  • Identify decisions that need named owners and alternates.
  • Separate confirmed facts from working hypotheses in updates.
  • Use scenario changes to expose handoff failures.
  • Turn exercise findings into owned, testable improvements.

Possible format

Discuss a keynote, executive discussion, or tabletop format. A scenario exercise requires separate planning for participants, objectives, boundaries, and handling of sensitive details.

Questions for your planning brief

  • What decision or handoff has not been exercised recently?
  • Which business services matter most to the scenario?
  • Who needs to participate for the exercise to be realistic?

Read before the conversation