Although cyberattacks have become more common, handling them remains extremely challenging for organizations. Even if things go well on the technical level, incident response (IR) is still a stressful and hectic process across the company; this is the reality of cyber crisis management.
For cyber professionals, the aftermath of handling an attack can often feel like winning the battle but losing the war. I have seen this feeling unfold numerous times during the past six years as I have handled more than 400 cyber incidents of all kinds, including attacks carried out by criminal and state-backed groups.
