Ask HN: It's your first day as an Incident Response Manager, what do you ask?

1 points by secfirstmd ↗ HN
Say you are starting a new role at a company as an cyber incident response manager.

What are the first questions you would ask?

1 comment

[ 3.9 ms ] story [ 12.2 ms ] thread
Where is the historic data? You want to know frequency of prior responses, types of incidents, and severity of those incidents.

The goal of this position should be to better expose risk data internally to lower risk moving forward. Your job is reactive but you need to be continuously performing analysis to result in better planning from your leadership.