TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

The things we find hardest in incident response

20 pointsby sjwhitworthover 3 years ago

1 comment

dsr_over 3 years ago
&quot;Let folks know why you’ve joined, how you can help, and that you&#x27;re taking 5 mins to get up to speed. Don’t be afraid to put the brakes on the response and ask literally everyone to provide an update on what they’re seeing, what they’re doing and what they need.&quot;<p>This might be the most important bit of advice here; the corollary is barely mentioned at the end, and deserves more discussion:<p>When you think you know what&#x27;s going on, what&#x27;s caused it and how to fix it, recap your evidence and argument and make sure that if the group has been uncovering evidence against that hypothesis, you don&#x27;t ignore it. Few incidents will be made much worse off by a five minute delay in applying the right fix; there&#x27;s no end of the trouble you can get into by applying a terrible fix.