At a NAISG meeting awhile back, a friend gave a talk about building an incident management program that cuts chaos down to a minimum. At BSidesSF next week, he’ll give an updated version of the presentation. The breakthrough comes when the CSO stops trying to keep bad things from ever happening and instead builds a program around the expectation that things will break from time to time. “If you dont plan for incidents then incidents will plan for you,” he says.”]