Most organizations will suffer one or more major security incidents in which an attacker has administrative control over IT systems. Microsoft advises individuals in the roles of CIO, CISO, general counsel, head of PR, and immediate colleagues to prepare for a crisis. The more time it takes to respond to an incident, the more room hackers will have to commandeer what theyd like. Companies that arent prepared for an attack may end up far outspending those who do, says Theresa Payton.”]
Source: https://www.csoonline.com/article/3243246/why-incident-response-is-the-best-cybersecurity-roi.html