During an incident, managers are not only responsible for their own actions but also for guiding their teams. The Incident Response Plan (IRP) requires managers to:
- Confirm that incidents are logged and escalated quickly.
- Support IT and Risk teams in investigating suspicious activities.
- Communicate updates to staff to maintain calm and avoid misinformation.
- Participate in post-incident reviews to identify gaps and ensure lessons learned are applied.