Incident coordination
Run a mock incident tabletop. Create a timeline, assign containment and recovery owners, write an executive update and finish with corrective actions.
The incident response role directs containment and recovery, maintains incident records, briefs executives and leads lessons learned.
Source posting