$ grep -l "tag:incident-response" writing/
tag: incident response.
7 pieces tagged incident response, newest first. The full taxonomy is on the tag index.
2026·09·30
The basics should not need a specialist: reading the 2026 cyber skills survey 57 per cent of UK businesses are not confident in at least one of nine basic security tasks, up from 49 per cent. What the government survey actually measures, why the rise may be good news, and why most of the fixes are defaults, not training. small business · cyber essentials · incident response · plain english
6 min
2026·09·29
Patching is step five: inside the NetScaler zero-days Attackers exploited two Citrix NetScaler ADC and Gateway flaws for weeks before fixes shipped on 27 September. How CVE-2026-88771 turns a log line into a root shell, who is affected, and why the NCSC lists patching fifth. vulnerability management · incident response · patching · threat intel · board
12 min
2026·09·27
The 999 lines held: Dyfed-Powys Police and the staff question Dyfed-Powys Police kept 999 and 101 running through a cyber incident and has so far found no evidence the public's data was accessed; staff data is still under investigation. What went right, what "technical difficulties" costs, and why your own people should never hear last. incident response · data protection · social engineering · governance · board
10 min
2026·07·16
The Qantas breach was a phone call: what we know A living account of the Qantas breach, now pinned on a tech-support scam. No zero-day — a phone call to a contact centre exposed 5.7 million customers. What's confirmed, what's still unproven, and the help-desk controls that actually stop it. Updated as it develops. data breach · social engineering · incident response
10 min
2026·04·07
Incident Response Planning for a Small Business Without a SOC You do not need a security operations centre to have a plan. You need a single page, an out-of-band phone number, and a Saturday morning. tutorial · defence · incident-response · small-business · governance · planning
12 min tutorial
2025·08·23
The incidents that do not make the papers What three years on the CREST Incident Response Pan-Europe board has taught me about the work the headlines never cover, and the kind of firm a customer should actually want to be on the end of the phone with. crest · incident response · craft · standards
6 min
2025·07·26
Carrying the pager, revisited A reflection on a year of mature incident-response practice — what carrying the on-call pager has taught me about the shape of leadership, the cost of not training your successor, and what the work actually looks like at three in the morning. incident response · craft · leadership
6 min
→ all tags · all writing