{"ok":true,"trend":{"id":713855,"platform":"mastodon","region":"global","key":"most incident plans i have reviewed were written once, approved, and never run. the first time they meet reality is a re","title":"Most incident plans I have reviewed were written once, approved, and never run. The first time they meet reality is a re","url":"https://infosec.exchange/@adrianhollister/117370348158489851","first_seen":"2026-10-02T08:46:46.717416Z","last_seen":"2026-10-02T08:46:46.717416Z","last_rank":9,"peak_rank":9,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.853125,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"A cybersecurity commentator says most incident response plans are written once, approved, and never rehearsed, so teams only test them during a real incident. That leads to wasted first hours searching for contact numbers and arguing over decision-making authority. The UK's National Cyber Security Centre offers a free tool, Exercise in a Box, that lets organisations run practice scenarios to close that gap before an attack happens.","why":"Practitioners are debating whether untested incident plans are a widespread weakness in organisational cyber readiness.","tone":"neutral","entities":["National Cyber Security Centre","Exercise in a Box"],"summarized_at":"2026-10-02T08:47:16.139752Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1033},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Incident response plans rarely tested before real crises, security expert says","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-02T08:46:46.717416Z","rank":9,"volume":1}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@adrianhollister/117370348158489851","author":"adrianhollister@infosec.exchange","title":null,"snippet":"Most incident plans I have reviewed were written once, approved, and never run. The first time they meet reality is a real incident, which is why so many first hours are spent finding phone numbers and arguing about who is allowed to decide. The NCSC's Exercise in a Box costs…","posted_at":"2026-10-02T08:23:04Z","likes":1}],"elsewhere":[],"window":"7d"}}