Blueprint-Incident-Response 72 Hours of Incident Response π»ππ Setting the Stage Financial Institute Tipped By: • Private sector (multiple times) • Law enforcement Business continuity is critical • Critical production environment IT personnel not security aware Friday 18:15 CERT Hotline Call ~23:00 - EDR installed on critical systems, time for bed! Custo