Rittenhouse·11:00 AM – 11:50 AM
Friday, December 11, 2026
Tabletop to Turnkey: Incident Response Programs That Survive Contact With Reality
Stephen Dyson & Julian Austin
Incident response & ransomware
About this talk
Most incident response plans are written for the incident someone imagined, not the one the organization actually gets, and most tabletop exercises end up confirming the plan instead of breaking it. This talk covers building IR playbooks and exercises designed to fail productively: stress-testing decision points, communication chains, and legal or regulatory notification triggers before a real incident does it instead. Drawn from both playbook development and live exercise facilitation, it covers what separates a paper plan from an organization that actually recovers, and how current breach no