Reg S-P: Part one of a series: Ideas to improve incident response

The CCO was tested on how to respond to a firm breach—not once, but twice