When it comes to security incident response strategies, it seems that many organisations tend to focus a great deal on the importance of cyber resilience, which is entirely valid, but they often forget to factor in the value of human resilience.
After all, a lot is expected from the people responsible for the containment, analysis, and remediation of an attack, as well as the subsequent recovery effort. At every stage in the process, they must keep cool heads while analysing complex situations, formulating appropriate responses, diplomatically managing stakeholder expectations, and sometimes dealing with pushback on their recommendations. And that’s without mentioning the long hours and limited resources with which they regularly contend.
