The first minutes of a cyber incident can mean the difference between effective containment and full-blown crisis. In this SANS virtual roundtable, security leaders from diverse sectors will examine what actually happens versus what should happen when incident response collides with real-world complexity. From fragmented tooling to delayed escalation paths, the discussion will highlight how teams can overcome coordination friction and intelligence gaps under pressure.
Join us for an in-depth look at how resilient organizations implement Agile Incident Response across SOC, cloud, OT, and executive teams. Panelists will discuss how threat hunting accelerates triage, where cross-functional workflows often fail, and which IR strategies remain effective when response speed and clarity matter most.
You Will Learn:
- Common breakdowns in early response, and how seasoned teams prevent escalation
- How cross-functional teams can align under pressure during incidents
- The role of threat intelligence and proactive hunting in high-velocity attacks
- Preparation steps organizations should take before an enterprise-wide event unfolds
- New response challenges emerging in 2026 and beyond
Whether your team is building incident response capabilities or refining a mature program, this session will deliver practical lessons grounded in field experience.
Register to join the discussion.
